Supply Chain Incidents

MAL-2025-187741

Malicious code in lepton-cache-soap-hexo (npm)

MAL-2025-187667

Malicious code in karma-install-spectron-bootes (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-185533

Malicious code in archaeometry-command-iota-octans (npm)

MAL-2025-186180

Malicious code in cluster-decompress-double-encode-quick (npm)

MAL-2025-187206

Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

MAL-2025-189031

Malicious code in quasar-helmet-metabolomics-node-config (npm)

MAL-2025-186284

Malicious code in configstore-hermes-development-update (npm)

MAL-2025-189265

Malicious code in rocket-vortex-nebula-barnard (npm)

MAL-2025-186913

Malicious code in exoplanetology-link-commitlint-prosthetics (npm)

MAL-2025-189552

Malicious code in soap-callback-convict-middleware (npm)

MAL-2025-185959

Malicious code in byte-root-test-kappa-sudo (npm)

MAL-2025-189449

Malicious code in serialize-bash-authenticate-execute-cloud (npm)

MAL-2025-186407

Malicious code in csrf-callisto-hapi-nextjs (npm)

MAL-2025-188404

Malicious code in old-decompress-scale-throw-user (npm)

MAL-2025-186626

Malicious code in dotenv-safe-sedimentology-wolf-singularity (npm)

MAL-2025-186046

Malicious code in centauri-filament-private-on (npm)

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)

MAL-2025-189042

Malicious code in query-sed-hash-mu-link (npm)

MAL-2025-186158

Malicious code in class-debug-private-decrypt-slow (npm)

MAL-2025-187989

Malicious code in mesosphere-innercore-transport-proteomics (npm)

MAL-2025-186647

Malicious code in duplex-lacerta-link-pipe (npm)