Supply Chain Incidents

MAL-2025-189531

Malicious code in slides-public-alphard-canopus (npm)

MAL-2025-187062

Malicious code in fusion-farout-centaurus-metabolomics (npm)

MAL-2025-190154

Malicious code in virgo-arcturus-hydra-stream (npm)

MAL-2025-189072

Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

MAL-2025-186687

Malicious code in eigenstate-gravitationalwave-config-ora (npm)

MAL-2025-189774

Malicious code in superposition-nucleosynthesis-mui-rigel (npm)

MAL-2025-190057

Malicious code in unix-execute-file-route-reject (npm)

MAL-2025-186994

Malicious code in flare-backend-jsonp-orogeny (npm)

MAL-2025-188013

Malicious code in meteor-bionics-schema-flare (npm)

MAL-2025-188321

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin (npm)

MAL-2025-186904

Malicious code in exoplanet-izar-superposition-style-loader (npm)

MAL-2025-186064

Malicious code in centaurus-neptune-css-loader-lynx (npm)

MAL-2025-186333

Malicious code in cosmicray-andromeda-registry-npm (npm)

MAL-2025-189882

Malicious code in test-fork-gravity-puppeteer (npm)

MAL-2025-189018

Malicious code in quark-dotenv-safe-run-script-planckscale (npm)

MAL-2025-188256

Malicious code in new-decode-process-orchestrate-balance (npm)

MAL-2025-187528

Malicious code in ionosphere-terraforming-string-exosphere (npm)

MAL-2025-186256

Malicious code in commitlint-resolvers-procyon-pm2 (npm)

MAL-2025-189686

Malicious code in stream-polaris-json-ursa (npm)

MAL-2025-188237

Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

MAL-2025-188816

Malicious code in primatology-chromedriver-vortex-nebula (npm)

MAL-2025-190312

Malicious code in wezen-hexo-update-lithosphere (npm)

MAL-2025-186202

Malicious code in cold-phi-cloud-cluster-private (npm)

MAL-2025-190327

Malicious code in wind-sun-stub-function-import (npm)