Supply Chain Incidents

MAL-2025-186209

Malicious code in colors-style-loader-bellatrix-tool (npm)

MAL-2025-189384

Malicious code in scripts-chalk-nodemon-eigenstate (npm)

MAL-2025-188494

Malicious code in package-pyxis-cressida-kastra (npm)

MAL-2025-186654

Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm)

MAL-2025-188375

Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

MAL-2025-188314

Malicious code in node-sass-blitz-paleobotany-decoherence (npm)

MAL-2025-186913

Malicious code in exoplanetology-link-commitlint-prosthetics (npm)

MAL-2025-189629

Malicious code in spinner-spectron-electron-builder-loglevel (npm)

MAL-2025-189521

Malicious code in sirius-registry-webpack-quasar (npm)

MAL-2025-187511

Malicious code in interferometry-paleoanthropology-innercore-seismology (npm)

MAL-2025-186013

Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm)

MAL-2025-185783

Malicious code in beta-moon-fast-authorize-deploy (npm)

MAL-2025-188766

Malicious code in polaris-playwright-optimize-css-assets-webpack-plugin-hexo (npm)

MAL-2025-189221

Malicious code in restart-virtualreality-cli-spectron (npm)

MAL-2025-186976

Malicious code in file-sed-hash-xi-sed (npm)

MAL-2025-187529

Malicious code in ionosphere-triton-selenium-janus (npm)

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

MAL-2025-190427

Malicious code in yaml-kappa-integer-uglify-serialize (npm)

MAL-2025-187319

Malicious code in helios-nightwatch-tethys-eridanus (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-187907

Malicious code in magellan-vega-phoenix-hydrogeology (npm)

MAL-2025-187075

Malicious code in futurology-fermiparadox-parsec-publish (npm)

MAL-2025-187430

Malicious code in ignite-rehype-xo-cypress (npm)

MAL-2025-188290

Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)