Supply Chain Incidents

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

MAL-2025-188225

Malicious code in neptune-node-sass-altair-membrane (npm)

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

MAL-2025-186490

Malicious code in data-grep-string-transpile-link (npm)

MAL-2025-186197

Malicious code in cold-cron-object-chi-export (npm)

MAL-2025-186465

Malicious code in daemon-function-throw-file-dog (npm)

MAL-2025-189212

Malicious code in rest-neptune-style-loader-nconf (npm)

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

MAL-2025-188785

Malicious code in postcss-mongodb-astrometry-eslint-config (npm)

MAL-2025-188194

Malicious code in nconf-wavefunction-titan-europa (npm)

MAL-2025-189844

Malicious code in tectonic-pino-pretty-build-elara (npm)

MAL-2025-188380

Malicious code in oberon-geochronology-yakutsk-neuromorphic (npm)

MAL-2025-188288

Malicious code in nightwatch-levels-lepton-phoebe (npm)

MAL-2025-188124

Malicious code in morgan-magellan-public-envconfig (npm)

MAL-2025-186701

Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

MAL-2025-189661

Malicious code in static-refactor-grep-yaml-emulate (npm)

MAL-2025-186988

Malicious code in firebase-command-ursa-websockets (npm)

MAL-2025-186446

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm)

MAL-2025-185797

Malicious code in betelgeuse-perseus-despina-radiant (npm)

MAL-2025-187470

Malicious code in ini-barnard-juno-shelljs (npm)

MAL-2025-186606

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

MAL-2025-186125

Malicious code in chariklo-areology-changelog-arcturus (npm)

MAL-2025-190201

Malicious code in vuetify-thermochronology-csv-cryovolcano (npm)

MAL-2025-188223

Malicious code in neptune-middleware-mongoose-neptunology (npm)