Supply Chain Incidents

MAL-2025-186446

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-186863

Malicious code in ethology-zephyr-dorado-browserify (npm)

MAL-2025-187496

Malicious code in install-enif-blitz-supervisor (npm)

MAL-2025-188250

Malicious code in neutronstar-hologram-volcanology-asteroid (npm)

MAL-2025-187368

Malicious code in holography-hercules-janus-postcss (npm)

MAL-2025-187335

Malicious code in hercules-deimos-superagent-webdriverio (npm)

MAL-2025-186109

Malicious code in changelog-graviton-hadron-panspermia (npm)

MAL-2025-186785

Malicious code in epimetheus-sagitta-cosmicweb-dactyl (npm)

MAL-2025-186811

Malicious code in eridanus-paleoceanography-blitz-elektra (npm)

MAL-2025-189360

Malicious code in saturnology-darkenergy-sadr-paleobotany (npm)

MAL-2025-186310

Malicious code in cordelia-zenith-ganymede-mutation (npm)

MAL-2025-187432

Malicious code in import-benchmark-warn-node-catch (npm)

MAL-2025-187822

Malicious code in lithosphere-geodynamo-mui-robotics (npm)

MAL-2025-188071

Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm)

MAL-2025-190417

Malicious code in yakutsk-luna-nova-triton (npm)

MAL-2025-189902

Malicious code in testcafe-titan-fornax-astro (npm)

MAL-2025-186370

Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm)

MAL-2025-185456

Malicious code in andromeda-impulse-quasarjet-elara (npm)

MAL-2025-186809

Malicious code in eridanus-jabbah-xerxes-enceladus (npm)

MAL-2025-187693

Malicious code in kinetic-ora-bootstrap-redshift (npm)

MAL-2025-189233

Malicious code in rho-object-test-char-shell (npm)

MAL-2025-186607

Malicious code in dorado-hydrogeology-zooarchaeology-regulus (npm)

MAL-2025-186308

Malicious code in cordelia-solis-markdown-xerxes (npm)