Supply Chain Incidents

MAL-2025-189093

Malicious code in readable-commitizen-photon-gatsby (npm)

MAL-2025-186670

Malicious code in easy-interpret-big-proxy-scale (npm)

MAL-2025-187114

Malicious code in ganymede-tethys-jwt-halley (npm)

MAL-2025-189387

Malicious code in scripts-hermes-pulsar-neuromorphic (npm)

MAL-2025-186962

Malicious code in figures-betelgeuse-ethology-magellan (npm)

MAL-2025-188184

Malicious code in native-rate-limiter-uninstall-regulus (npm)

MAL-2025-190335

Malicious code in winston-leda-mesosphere-umbra (npm)

MAL-2025-190310

Malicious code in wezen-centauri-mutation-link (npm)

MAL-2025-186218

Malicious code in comet-oauth-airbnb-tethys (npm)

MAL-2025-186467

Malicious code in dagda-ablation-ganymede-meteor (npm)

MAL-2025-186966

Malicious code in figures-mantle-docusaurus-promise (npm)

MAL-2025-188265

Malicious code in nextjs-octans-interferometry-fusion (npm)

MAL-2025-189369

Malicious code in scale-deserialize-function-optimize-hot (npm)

MAL-2025-187001

Malicious code in float-new-route-benchmark-async (npm)

MAL-2025-189534

Malicious code in slidev-deimos-heka-warp (npm)

MAL-2025-186615

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

MAL-2025-188565

Malicious code in parse-key-lambda-new-socket (npm)

MAL-2025-186704

Malicious code in electron-postcss-loader-yaml-pyxis (npm)

MAL-2025-187362

Malicious code in hologram-jekyll-radiometric-bellatrix (npm)

MAL-2025-189145

Malicious code in rehype-sequelize-avior-redis (npm)

MAL-2025-186811

Malicious code in eridanus-paleoceanography-blitz-elektra (npm)

MAL-2025-186421

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

MAL-2025-188554

Malicious code in parallax-janus-deimos-warp (npm)

MAL-2025-190327

Malicious code in wind-sun-stub-function-import (npm)