Supply Chain Incidents

MAL-2025-188440

Malicious code in ophiuchus-eleventy-fornax-proxima (npm)

MAL-2025-188911

Malicious code in proxima-dotenv-safe-carpo-release-it (npm)

MAL-2025-186654

Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend (npm)

MAL-2025-189384

Malicious code in scripts-chalk-nodemon-eigenstate (npm)

MAL-2025-188494

Malicious code in package-pyxis-cressida-kastra (npm)

MAL-2025-185409

Malicious code in airbnb-nconf-redis-jwt (npm)

MAL-2025-189629

Malicious code in spinner-spectron-electron-builder-loglevel (npm)

MAL-2025-188375

Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

MAL-2025-188360

Malicious code in nova-virgo-jasmine-redshift (npm)

MAL-2025-188505

Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)

MAL-2025-188503

Malicious code in paleobotany-warp-less-uranology (npm)

MAL-2025-187511

Malicious code in interferometry-paleoanthropology-innercore-seismology (npm)

MAL-2025-186013

Malicious code in cassini-html-webpack-plugin-loglevel-jest (npm)

MAL-2025-189531

Malicious code in slides-public-alphard-canopus (npm)

MAL-2025-187907

Malicious code in magellan-vega-phoenix-hydrogeology (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-189935

Malicious code in titan-bootstrap-lynx-comet (npm)

MAL-2025-186947

Malicious code in fast-sudo-fire-chi-authenticate (npm)

MAL-2025-189317

Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)

MAL-2025-188816

Malicious code in primatology-chromedriver-vortex-nebula (npm)

MAL-2025-188226

Malicious code in neptune-redshift-semantic-release-xml (npm)

MAL-2025-188407

Malicious code in old-import-decode-table-process (npm)

MAL-2025-188237

Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

MAL-2025-190458

Malicious code in zenobia-zephyr-dactyl-planetology (npm)