Supply Chain Incidents

MAL-2025-188534

Malicious code in paleontology-lyra-hercules-protractor (npm)

MAL-2025-186034

Malicious code in cat-void-bash-cache-bundle (npm)

MAL-2025-186594

Malicious code in docusaurus-hugo-uglify-js-dione (npm)

MAL-2025-185369

Malicious code in abstract-wind-sed-void-chi (npm)

MAL-2025-187594

Malicious code in java-socket-cluster-decode-catch (npm)

MAL-2025-188816

Malicious code in primatology-chromedriver-vortex-nebula (npm)

MAL-2025-189786

Malicious code in sync-taurus-cluster-webpack (npm)

MAL-2025-190244

Malicious code in water-user-fast-sanitize-test (npm)

MAL-2025-189020

Malicious code in quark-hugo-geckodriver-ionosphere (npm)

MAL-2025-187496

Malicious code in install-enif-blitz-supervisor (npm)

MAL-2025-187249

Malicious code in grus-superposition-pegasus-antd (npm)

MAL-2025-190025

Malicious code in uglify-js-gravity-upgrade-aether (npm)

MAL-2025-185691

Malicious code in await-figures-nodemon-genomics (npm)

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

MAL-2025-186255

Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)

MAL-2025-187327

Malicious code in helmet-release-it-enceladus-figures (npm)

MAL-2025-189228

Malicious code in reveal-md-sirius-sequelize-nebula (npm)

MAL-2025-187159

Malicious code in geochemistry-jsonp-virtualreality-primatology (npm)

MAL-2025-188795

Malicious code in prettier-despina-gacrux-shelljs (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-185648

Malicious code in auriga-eslint-halley-fetch (npm)

MAL-2025-185961

Malicious code in cache-cat-index-async-small (npm)

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

MAL-2025-188954

Malicious code in publish-postcss-loader-achernar-hermes (npm)