Supply Chain Incidents

MAL-2025-187699

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm)

MAL-2025-186239

Malicious code in commitizen-chromedriver-redis-polaris (npm)

MAL-2025-189615

Malicious code in spectron-webdriver-commitlint-apollo-mysql (npm)

MAL-2025-188023

Malicious code in meteor-fermiparadox-pino-mysql (npm)

MAL-2025-188834

Malicious code in process-loop-zenobia-optimize-css-assets-webpack-plugin (npm)

MAL-2025-189717

Malicious code in sublimation-private-technosignature-futurology (npm)

MAL-2025-190337

Malicious code in winston-neutrino-commitlint-tachyon (npm)

MAL-2025-189617

Malicious code in spectroscopy-dotenv-cassini-sedimentology (npm)

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-188169

Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)

MAL-2025-188237

Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

MAL-2025-190415

Malicious code in yakutsk-blueshift-supervisor-socketio (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-185887

Malicious code in bootstrap-cluster-fornax-link (npm)

MAL-2025-189257

Malicious code in rocket-eleventy-alphard-changelog (npm)

MAL-2025-186775

Malicious code in envconfig-protoplanetarydisk-dotenv-safe-isostasy (npm)

MAL-2025-189195

Malicious code in resolvers-chakra-ui-bootstrap-ursa (npm)

MAL-2025-188356

Malicious code in nova-quantum-protractor-commitlint (npm)

MAL-2025-186295

Malicious code in convict-axios-cosmogenic-miranda (npm)

MAL-2025-187586

Malicious code in jasmine-cypress-gravity-install (npm)

MAL-2025-188001

Malicious code in meta-monitor-info-import-final (npm)

MAL-2025-188578

Malicious code in passport-nightwatch-sedna-karma (npm)

MAL-2025-187879

Malicious code in luna-mira-eslint-wezen (npm)