Supply Chain Incidents

MAL-2025-186773

Malicious code in envconfig-fornax-void-duplex (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-187425

Malicious code in ignite-configstore-morgan-kastra (npm)

MAL-2025-188290

Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

MAL-2025-185394

Malicious code in aether-pulsar-polaris-aldebaran (npm)

MAL-2025-185572

Malicious code in array-upsilon-decrypt-container-object (npm)

MAL-2025-188842

Malicious code in procyon-cosmos-mutation-pyxis (npm)

MAL-2025-188220

Malicious code in neptune-indus-tachyon-phoenix (npm)

MAL-2025-187342

Malicious code in hermes-child-process-apex-centauri (npm)

MAL-2025-189506

Malicious code in singularitarianism-prosthetics-wolf-exosphere (npm)

MAL-2025-189048

Malicious code in quito-config-lightyear-quito (npm)

MAL-2025-185654

Malicious code in aurora-fusion-perseus-pm2 (npm)

MAL-2025-186074

Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

MAL-2025-185531

Malicious code in archaeometry-accretion-avior-panspermia (npm)

MAL-2025-186504

Malicious code in decompress-deserialize-nu-new-emulate (npm)

MAL-2025-187959

Malicious code in mechatronics-borealis-tardigrade-init (npm)

MAL-2025-190044

Malicious code in umbriel-eslint-config-kardashevscale-jwt (npm)

MAL-2025-188332

Malicious code in nodemon-europa-antares-frontend (npm)

MAL-2025-189531

Malicious code in slides-public-alphard-canopus (npm)

MAL-2025-186964

Malicious code in figures-duplex-magnetar-await (npm)

MAL-2025-190017

Malicious code in typeorm-nestjs-equinox-europa (npm)

MAL-2025-186535

Malicious code in delta-sun-psi-new-byte (npm)

MAL-2025-188085

Malicious code in miranda-stream-resolvers-convict (npm)

MAL-2025-190382

Malicious code in xenos-xanthus-celeste-react-bootstrap (npm)