Supply Chain Incidents

MAL-2025-187912

Malicious code in magnetar-thermosphere-nconf-quantum (npm)

MAL-2025-186064

Malicious code in centaurus-neptune-css-loader-lynx (npm)

MAL-2025-189882

Malicious code in test-fork-gravity-puppeteer (npm)

MAL-2025-188290

Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

MAL-2025-186333

Malicious code in cosmicray-andromeda-registry-npm (npm)

MAL-2025-186256

Malicious code in commitlint-resolvers-procyon-pm2 (npm)

MAL-2025-189686

Malicious code in stream-polaris-json-ursa (npm)

MAL-2025-188256

Malicious code in new-decode-process-orchestrate-balance (npm)

MAL-2025-188762

Malicious code in polaris-interferometry-sails-convict (npm)

MAL-2025-186985

Malicious code in finally-stack-error-cold-assert (npm)

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

MAL-2025-189730

Malicious code in sudo-yaml-virtualize-encode-pi (npm)

MAL-2025-189531

Malicious code in slides-public-alphard-canopus (npm)

MAL-2025-187047

Malicious code in framework-rimraf-buffer-csrf (npm)

MAL-2025-185582

Malicious code in asthenosphere-dotenv-darkmatter-chromedriver (npm)

MAL-2025-188232

Malicious code in neptune-vega-slides-browserify (npm)

MAL-2025-190399

Malicious code in xml-proxima-rest-process (npm)

MAL-2025-185704

Malicious code in awk-eta-virtualize-route-route (npm)

MAL-2025-188237

Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

MAL-2025-189291

Malicious code in run-script-koa-json-cli (npm)

MAL-2025-189292

Malicious code in run-script-sagitta-pulsar-alphard (npm)

MAL-2025-188837

Malicious code in process-passport-eslint-config-speleology (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-189159

Malicious code in relay-xanadu-playwright-miranda (npm)