Supply Chain Incidents

MAL-2025-186922

Malicious code in export-hot-cold-orchestrate-awk (npm)

MAL-2025-186461

Malicious code in dactyl-phoenix-rest-gulp (npm)

MAL-2025-187836

Malicious code in local-cz-conventional-changelog-cosmos-quark (npm)

MAL-2025-189328

Malicious code in sails-dotenv-adonis-antd (npm)

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

MAL-2025-189981

Malicious code in transpile-refactor-protected-promise-interface (npm)

MAL-2025-188821

Malicious code in primatology-technosignature-magnetosphere-parcel (npm)

MAL-2025-186317

Malicious code in cors-google-mocha-prettier (npm)

MAL-2025-190028

Malicious code in uglify-view-stub-simulate-short (npm)

MAL-2025-187865

Malicious code in loop-mysql-jwt-jekyll (npm)

MAL-2025-187892

Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

MAL-2025-185988

Malicious code in callisto-europa-relay-bootes (npm)

MAL-2025-186817

Malicious code in eris-perseus-subscription-iota (npm)

MAL-2025-189829

Malicious code in taurus-interferometry-global-ultra (npm)

MAL-2025-189503

Malicious code in simulate-small-enum-protected-cluster (npm)

MAL-2025-187913

Malicious code in magnetosphere-exec-hyperion-spinner (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-189023

Malicious code in quark-perturbation-lyra-link (npm)

MAL-2025-185664

Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm)

MAL-2025-190407

Malicious code in xo-koa-metalsmith-perseus (npm)

MAL-2025-190327

Malicious code in wind-sun-stub-function-import (npm)

MAL-2025-187636

Malicious code in juno-proxima-wolf-tailwindcss (npm)

MAL-2025-185759

Malicious code in bash-serialize-decode-grid-sudo (npm)