Supply Chain Incidents

MAL-2025-186149

Malicious code in chromedriver-json-polaris-hyperion (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-187586

Malicious code in jasmine-cypress-gravity-install (npm)

MAL-2025-188305

Malicious code in node-config-cross-env-event-fomalhaut (npm)

MAL-2025-189618

Malicious code in spectroscopy-webdriver-manager-await-bootstrap (npm)

MAL-2025-187671

Malicious code in kastra-oberon-spectroscopy-mocha (npm)

MAL-2025-190432

Malicious code in yildun-cors-convict-ursa (npm)

MAL-2025-187621

Malicious code in json-apex-bellatrix-docusaurus (npm)

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

MAL-2025-190327

Malicious code in wind-sun-stub-function-import (npm)

MAL-2025-186461

Malicious code in dactyl-phoenix-rest-gulp (npm)

MAL-2025-190028

Malicious code in uglify-view-stub-simulate-short (npm)

MAL-2025-187836

Malicious code in local-cz-conventional-changelog-cosmos-quark (npm)

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-189328

Malicious code in sails-dotenv-adonis-antd (npm)

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)

MAL-2025-189981

Malicious code in transpile-refactor-protected-promise-interface (npm)

MAL-2025-186317

Malicious code in cors-google-mocha-prettier (npm)

MAL-2025-188821

Malicious code in primatology-technosignature-magnetosphere-parcel (npm)

MAL-2025-185664

Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm)

MAL-2025-186596

Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm)

MAL-2025-185988

Malicious code in callisto-europa-relay-bootes (npm)

MAL-2025-187112

Malicious code in ganymede-server-test-warp (npm)