Supply Chain Incidents

MAL-2025-189396

Malicious code in secure-eta-throw-index-fork (npm)

MAL-2025-190397

Malicious code in xml-phoebe-protoplanetarydisk-magnetar (npm)

MAL-2025-189830

Malicious code in taurus-mutation-izar-node-sass (npm)

MAL-2025-188635

Malicious code in perseus-vuepress-hydra-backend (npm)

MAL-2025-186157

Malicious code in cladistics-virgo-transform-query (npm)

MAL-2025-186126

Malicious code in chariklo-babel-postgres-thuban (npm)

MAL-2025-187608

Malicious code in jest-titan-postcss-loader-galaxy (npm)

MAL-2025-186410

Malicious code in csrf-farout-backend-fomalhaut (npm)

MAL-2025-186289

Malicious code in container-async-awk-zeta-runtime (npm)

MAL-2025-185449

Malicious code in analyze-boolean-pipe-import-epsilon (npm)

MAL-2025-188120

Malicious code in moon-old-gamma-deploy-cloud (npm)

MAL-2025-185601

Malicious code in astroinformatics-ethology-venus-slidev (npm)

MAL-2025-188662

Malicious code in phi-private-async-earth-xi (npm)

MAL-2025-187382

Malicious code in hugo-build-configstore-rollup-plugin (npm)

MAL-2025-188587

Malicious code in pavo-colors-taurus-eslint-plugin (npm)

MAL-2025-186833

Malicious code in eslint-config-apex-hermes-zooarchaeology (npm)

MAL-2025-188724

Malicious code in pipe-pino-pretty-toml-meteor (npm)

MAL-2025-186257

Malicious code in commitlint-slides-octans-resolvers (npm)

MAL-2025-188669

Malicious code in phoebe-coronalmassejection-lightyear-jupiter (npm)

MAL-2025-185681

Malicious code in authorize-signal-report-omicron-decode (npm)

MAL-2025-189255

Malicious code in robotics-proxima-thuban-comet (npm)

MAL-2025-187126

Malicious code in geckodriver-betelgeuse-uninstall-csrf (npm)

MAL-2025-188333

Malicious code in nodemon-heka-wezen-meissa (npm)

MAL-2025-189557

Malicious code in soap-odin-config-sails (npm)