Supply Chain Incidents

MAL-2025-189888

Malicious code in test-slides-bellatrix-io (npm)

MAL-2025-189863

Malicious code in terraforming-nebula-cordelia-virtualreality (npm)

MAL-2025-187162

Malicious code in geodynamo-draco-cache-thermochronology (npm)

MAL-2025-188020

Malicious code in meteor-deneb-phoebe-paleoanthropology (npm)

MAL-2025-189072

Malicious code in radiometric-proxima-ophiuchus-bellatrix (npm)

MAL-2025-189774

Malicious code in superposition-nucleosynthesis-mui-rigel (npm)

MAL-2025-188321

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin (npm)

MAL-2025-186687

Malicious code in eigenstate-gravitationalwave-config-ora (npm)

MAL-2025-186904

Malicious code in exoplanet-izar-superposition-style-loader (npm)

MAL-2025-186333

Malicious code in cosmicray-andromeda-registry-npm (npm)

MAL-2025-190327

Malicious code in wind-sun-stub-function-import (npm)

MAL-2025-186064

Malicious code in centaurus-neptune-css-loader-lynx (npm)

MAL-2025-187062

Malicious code in fusion-farout-centaurus-metabolomics (npm)

MAL-2025-187912

Malicious code in magnetar-thermosphere-nconf-quantum (npm)

MAL-2025-186828

Malicious code in error-signal-minify-zero-index (npm)

MAL-2025-188290

Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

MAL-2025-185748

Malicious code in barnard-octans-development-async (npm)

MAL-2025-189531

Malicious code in slides-public-alphard-canopus (npm)

MAL-2025-189882

Malicious code in test-fork-gravity-puppeteer (npm)

MAL-2025-188256

Malicious code in new-decode-process-orchestrate-balance (npm)

MAL-2025-186256

Malicious code in commitlint-resolvers-procyon-pm2 (npm)

MAL-2025-189686

Malicious code in stream-polaris-json-ursa (npm)

MAL-2025-187018

Malicious code in fork-eslint-slidev-chakra-ui (npm)

MAL-2025-186095

Malicious code in chalk-cluster-nucleosynthesis-pipe (npm)