Supply Chain Incidents

MAL-2025-186489

Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda (npm)

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

MAL-2025-186543

Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)

MAL-2025-188002

Malicious code in metabolomics-cross-env-antares-run-script (npm)

MAL-2025-186273

Malicious code in config-cross-env-nova-bunyan (npm)

MAL-2025-185450

Malicious code in analyze-catch-load-nu-omicron (npm)

MAL-2025-190243

Malicious code in water-omega-compile-pipe-book (npm)

MAL-2025-189071

Malicious code in radiometric-nova-rocket-transport (npm)

MAL-2025-186786

Malicious code in epimetheus-uninstall-cressida-sedna (npm)

MAL-2025-186972

Malicious code in filament-tethys-brane-upgrade (npm)

MAL-2025-187508

Malicious code in interface-awk-balance-epsilon-orchestrate (npm)

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

MAL-2025-186114

Malicious code in changelog-polaris-dotenv-safe-phoebe (npm)

MAL-2025-188778

Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

MAL-2025-187693

Malicious code in kinetic-ora-bootstrap-redshift (npm)

MAL-2025-187160

Malicious code in geodynamo-biosignature-crust-mongodb (npm)

MAL-2025-190328

Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

MAL-2025-189680

Malicious code in stratosphere-speleology-rollup-plugin-hapi (npm)

MAL-2025-187497

Malicious code in install-fork-mdx-websockets (npm)

MAL-2025-185850

Malicious code in blazar-quark-publish-quito (npm)

MAL-2025-187034

Malicious code in fornax-materialize-sails-dactyl (npm)

MAL-2025-186603

Malicious code in dog-process-file-file-moon (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)