Supply Chain Incidents

MAL-2025-186970

Malicious code in figures-proxima-sedna-envconfig (npm)

MAL-2025-188255

Malicious code in new-alpha-transpile-air-resolve (npm)

MAL-2025-185954

Malicious code in byte-assert-finally-hot-sanitize (npm)

MAL-2025-187469

Malicious code in info-user-wind-book-sanitize (npm)

MAL-2025-188454

Malicious code in optimize-double-nu-cluster-function (npm)

MAL-2025-187883

Malicious code in lynx-astrobiology-exobiology-plutology (npm)

MAL-2025-190205

Malicious code in vulcan-delphinus-protoplanetarydisk-gatsby (npm)

MAL-2025-188538

Malicious code in paleontology-sublimation-europa-backend (npm)

MAL-2025-189057

Malicious code in radiant-nestjs-parcel-apex (npm)

MAL-2025-186415

Malicious code in css-loader-iota-celeste-electron (npm)

MAL-2025-189284

Malicious code in route-await-root-monitor-nu (npm)

MAL-2025-188727

Malicious code in pipe-virgo-perseus-auth (npm)

MAL-2025-190309

Malicious code in weywot-wezen-cryovolcano-auriga (npm)

MAL-2025-187117

Malicious code in ganymede-webdriver-manager-convict-equinox (npm)

MAL-2025-187331

Malicious code in helmet-terser-isostasy-nova (npm)

MAL-2025-189811

Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm)

MAL-2025-190264

Malicious code in webdriver-manager-parcel-innercore-redgiant (npm)

MAL-2025-189614

Malicious code in spectron-webdriver-async-primatology-canopus (npm)

MAL-2025-189939

Malicious code in titan-iota-carina-vuepress (npm)

MAL-2025-186248

Malicious code in commitlint-config-angular-forever-dotenv-parse-variables-google (npm)

MAL-2025-189710

Malicious code in subduction-middleware-javascript-supernova (npm)

MAL-2025-187447

Malicious code in impulse-sedna-sedna-cryovolcano (npm)

MAL-2025-188923

Malicious code in proxy-cache-beta-iota-water (npm)

MAL-2025-190174

Malicious code in visualize-validate-array-hot-analyze (npm)