Supply Chain Incidents

MAL-2025-188727

Malicious code in pipe-virgo-perseus-auth (npm)

MAL-2025-188920

Malicious code in proxima-spawn-mongoose-brane (npm)

MAL-2025-190052

Malicious code in umbriel-zenobia-sedna-odin (npm)

MAL-2025-187274

Malicious code in hapi-cross-env-subduction-mongodb (npm)

MAL-2025-187033

Malicious code in fornax-local-gemini-zenith (npm)

MAL-2025-186891

Malicious code in exec-radiometric-aether-juno (npm)

MAL-2025-190174

Malicious code in visualize-validate-array-hot-analyze (npm)

MAL-2025-188195

Malicious code in nconf-zenobia-antimatter-changelog (npm)

MAL-2025-188803

Malicious code in prettier-plugin-markdown-joviology-style-loader-zooarchaeology (npm)

MAL-2025-189765

Malicious code in supernova-eridanus-radiant-yakutsk (npm)

MAL-2025-186642

Malicious code in draco-quasarjet-envconfig-technocracy (npm)

MAL-2025-187923

Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

MAL-2025-189560

Malicious code in soap-weywot-robotics-on (npm)

MAL-2025-188455

Malicious code in optimize-pipe-signal-dog-index (npm)

MAL-2025-186260

Malicious code in compile-validate-sandbox-node-async (npm)

MAL-2025-185371

Malicious code in acamar-comet-flare-robotics (npm)

MAL-2025-189051

Malicious code in quito-process-oscillation-nanotechnology (npm)

MAL-2025-188225

Malicious code in neptune-node-sass-altair-membrane (npm)

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

MAL-2025-186088

Malicious code in chakra-ui-fornax-umbriel-wezen (npm)

MAL-2025-188026

Malicious code in meteor-jupiter-jupiter-xanthus (npm)

MAL-2025-185979

Malicious code in callback-saturnology-taphonomy-radiant (npm)

MAL-2025-186701

Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)