Supply Chain Incidents

MAL-2025-186005

Malicious code in carpo-aurora-pegasus-sqlite (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-189620

Malicious code in speleology-phenomic-nova-resonance (npm)

MAL-2025-189843

Malicious code in tectonic-pegasus-axios-nashira (npm)

MAL-2025-188071

Malicious code in miranda-fomalhaut-apollo-cz-conventional-changelog (npm)

MAL-2025-189313

Malicious code in sagitta-izar-dagda-nightmare (npm)

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

MAL-2025-190474

Malicious code in zero-epsilon-bash-cache-query (npm)

MAL-2025-188664

Malicious code in phi-shell-old-old-pi (npm)

MAL-2025-188948

Malicious code in publish-jest-sadr-prettier-plugin-markdown (npm)

MAL-2025-186406

Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

MAL-2025-187980

Malicious code in mensa-koa-castor-typeorm (npm)

MAL-2025-186178

Malicious code in cluster-concurrently-wolf-astrometry (npm)

MAL-2025-188489

Malicious code in outercore-sync-fornax-lightyear (npm)

MAL-2025-188817

Malicious code in primatology-impulse-decoherence-standard (npm)

MAL-2025-186480

Malicious code in darkenergy-helmet-epigenetics-leda (npm)

MAL-2025-187686

Malicious code in key-static-authorize-authenticate-quick (npm)

MAL-2025-186936

Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

MAL-2025-187458

Malicious code in indus-farout-carpo-astrobiology (npm)

MAL-2025-188176

Malicious code in native-coronalmassejection-writable-bionics (npm)

MAL-2025-188665

Malicious code in phi-transpile-delta-table-unix (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-187122

Malicious code in gatsby-fornax-nuxtjs-vuetify (npm)

MAL-2025-188083

Malicious code in miranda-postcss-blitz-module (npm)