Supply Chain Incidents

MAL-2025-188906

Malicious code in proxima-antimatter-express-redis (npm)

MAL-2025-188194

Malicious code in nconf-wavefunction-titan-europa (npm)

MAL-2025-185704

Malicious code in awk-eta-virtualize-route-route (npm)

MAL-2025-185863

Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm)

MAL-2025-186652

Malicious code in dynamo-ganymede-init-sequelize (npm)

MAL-2025-189560

Malicious code in soap-weywot-robotics-on (npm)

MAL-2025-186710

Malicious code in elektra-xml-grus-hugo (npm)

MAL-2025-187677

Malicious code in kernel-promise-proxy-xml-pipe (npm)

MAL-2025-188877

Malicious code in prosthetics-commitlint-astrobiology-io (npm)

MAL-2025-187076

Malicious code in futurology-jsonp-process-fornax (npm)

MAL-2025-186988

Malicious code in firebase-command-ursa-websockets (npm)

MAL-2025-186809

Malicious code in eridanus-jabbah-xerxes-enceladus (npm)

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

MAL-2025-185886

Malicious code in bootes-transform-nuxtjs-proxima (npm)

MAL-2025-185878

Malicious code in boolean-fork-uglify-dog-sanitize (npm)

MAL-2025-187392

Malicious code in husky-despina-readable-oscillation (npm)

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

MAL-2025-189212

Malicious code in rest-neptune-style-loader-nconf (npm)

MAL-2025-190284

Malicious code in webdriverio-umbriel-sequelize-version (npm)

MAL-2025-187195

Malicious code in google-darkmatter-xerxes-europa (npm)

MAL-2025-186543

Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)

MAL-2025-188864

Malicious code in promise-umbra-css-loader-postcss-loader (npm)

MAL-2025-189840

Malicious code in technosignature-taphonomy-pino-wasat (npm)

MAL-2025-189971

Malicious code in transhumanism-auriga-markdownlint-canopus (npm)