Supply Chain Incidents

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

MAL-2025-190229

Malicious code in wasat-bioinformatics-leda-bionics (npm)

MAL-2025-189846

Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)

MAL-2025-186701

Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

MAL-2025-189454

Malicious code in serialize-quick-alpha-book-resolve (npm)

MAL-2025-189348

Malicious code in sanitize-module-pi-code-static (npm)

MAL-2025-188478

Malicious code in orogeny-fork-query-troposphere (npm)

MAL-2025-189932

Malicious code in thuban-charon-uninstall-nextjs (npm)

MAL-2025-185869

Malicious code in book-boolean-runtime-grep-root (npm)

MAL-2025-186246

Malicious code in commitlint-chalk-eclipse-init (npm)

MAL-2025-189979

Malicious code in transpile-new-cache-iota-quick (npm)

MAL-2025-186419

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm)

MAL-2025-186642

Malicious code in draco-quasarjet-envconfig-technocracy (npm)

MAL-2025-185797

Malicious code in betelgeuse-perseus-despina-radiant (npm)

MAL-2025-188288

Malicious code in nightwatch-levels-lepton-phoebe (npm)

MAL-2025-189154

Malicious code in relay-dotenv-chai-ophiuchus (npm)

MAL-2025-189680

Malicious code in stratosphere-speleology-rollup-plugin-hapi (npm)

MAL-2025-186988

Malicious code in firebase-command-ursa-websockets (npm)

MAL-2025-185774

Malicious code in bellatrix-pulsar-bionics-cryovolcano (npm)

MAL-2025-188194

Malicious code in nconf-wavefunction-titan-europa (npm)

MAL-2025-187529

Malicious code in ionosphere-triton-selenium-janus (npm)

MAL-2025-189133

Malicious code in regulus-eridanus-meissa-winston (npm)

MAL-2025-185863

Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm)

MAL-2025-188098

Malicious code in module-biomimicry-rollup-comet (npm)