Supply Chain Incidents

MAL-2025-185763

Malicious code in bellatrix-axios-spica-geoarchaeology (npm)

MAL-2025-189573

Malicious code in socket-table-grid-sigma-deserialize (npm)

MAL-2025-190019

Malicious code in typeorm-protractor-cryovolcano-concurrently (npm)

MAL-2025-186620

Malicious code in dotenv-safe-electron-delphinus-dynamo (npm)

MAL-2025-186399

Malicious code in cryovolcano-grus-ini-proxima (npm)

MAL-2025-188351

Malicious code in nova-astro-playwright-mira (npm)

MAL-2025-188422

Malicious code in omicron-short-water-easy-beta (npm)

MAL-2025-188309

Malicious code in node-config-phoenix-regulus-html-webpack-plugin (npm)

MAL-2025-185795

Malicious code in betelgeuse-nodejs-hugo-flare (npm)

MAL-2025-189258

Malicious code in rocket-fomalhaut-sirius-kronos (npm)

MAL-2025-186717

Malicious code in element-ui-oscillation-higgs-solarnebula (npm)

MAL-2025-189114

Malicious code in redshift-nebula-cz-conventional-changelog-fornax (npm)

MAL-2025-186894

Malicious code in exec-zephyr-xo-izar (npm)

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

MAL-2025-187677

Malicious code in kernel-promise-proxy-xml-pipe (npm)

MAL-2025-190327

Malicious code in wind-sun-stub-function-import (npm)

MAL-2025-185889

Malicious code in bootstrap-fusion-loop-restart (npm)

MAL-2025-186982

Malicious code in final-uglify-decrypt-enum-data (npm)

MAL-2025-188131

Malicious code in mu-dog-proxy-decode-unix (npm)

MAL-2025-189979

Malicious code in transpile-new-cache-iota-quick (npm)

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)

MAL-2025-187971

Malicious code in meissa-markdown-iota-vortex (npm)

MAL-2025-186700

Malicious code in electron-builder-lint-typeorm-bulma (npm)

MAL-2025-188918

Malicious code in proxima-sequelize-miranda-chalk (npm)