Supply Chain Incidents

MAL-2025-185619

Malicious code in async-graviton-webdriverio-quantum (npm)

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

MAL-2025-188288

Malicious code in nightwatch-levels-lepton-phoebe (npm)

MAL-2025-186701

Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

MAL-2025-188194

Malicious code in nconf-wavefunction-titan-europa (npm)

MAL-2025-189212

Malicious code in rest-neptune-style-loader-nconf (npm)

MAL-2025-185614

Malicious code in async-cressida-umbra-vuepress (npm)

MAL-2025-189038

Malicious code in quasarjet-umbriel-global-rest (npm)

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

MAL-2025-185869

Malicious code in book-boolean-runtime-grep-root (npm)

MAL-2025-189438

Malicious code in semantic-release-aether-buffer-concurrently (npm)

MAL-2025-190034

Malicious code in ultra-winston-standard-neutrino (npm)

MAL-2025-187673

Malicious code in kaus-antares-update-neptune (npm)

MAL-2025-188110

Malicious code in mongoose-convict-kaus-thermochronology (npm)

MAL-2025-186678

Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)

MAL-2025-186606

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

MAL-2025-185863

Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm)

MAL-2025-190107

Malicious code in ursa-hawkingradiation-pulsar-superagent (npm)

MAL-2025-188462

Malicious code in ora-release-it-ichnology-subscription (npm)

MAL-2025-185797

Malicious code in betelgeuse-perseus-despina-radiant (npm)

MAL-2025-187195

Malicious code in google-darkmatter-xerxes-europa (npm)

MAL-2025-188223

Malicious code in neptune-middleware-mongoose-neptunology (npm)

MAL-2025-186912

Malicious code in exoplanetology-grus-mdx-comet (npm)

MAL-2025-187470

Malicious code in ini-barnard-juno-shelljs (npm)