Supply Chain Incidents

MAL-2025-188128

Malicious code in morgan-readable-auriga-promise (npm)

MAL-2025-188225

Malicious code in neptune-node-sass-altair-membrane (npm)

MAL-2025-189552

Malicious code in soap-callback-convict-middleware (npm)

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

MAL-2025-186701

Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

MAL-2025-190283

Malicious code in webdriverio-thermosphere-cladistics-multiverse (npm)

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

MAL-2025-189449

Malicious code in serialize-bash-authenticate-execute-cloud (npm)

MAL-2025-189212

Malicious code in rest-neptune-style-loader-nconf (npm)

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

MAL-2025-190438

Malicious code in yonder-mineralogy-ablation-achernar (npm)

MAL-2025-186284

Malicious code in configstore-hermes-development-update (npm)

MAL-2025-187149

Malicious code in genomics-run-script-auth-neptune (npm)

MAL-2025-185559

Malicious code in ariel-callisto-commitlint-config-angular-install (npm)

MAL-2025-189398

Malicious code in secure-phi-web-yaml-socket (npm)

MAL-2025-187117

Malicious code in ganymede-webdriver-manager-convict-equinox (npm)

MAL-2025-189452

Malicious code in serialize-final-beta-deserialize-await (npm)

MAL-2025-187389

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

MAL-2025-187206

Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

MAL-2025-188995

Malicious code in quantum-computing-eslint-plugin-zephyr-loopback (npm)

MAL-2025-187796

Malicious code in link-slidev-dione-markdown-pdf (npm)

MAL-2025-189652

Malicious code in standard-thuban-commitlint-config-angular-got (npm)

MAL-2025-187177

Malicious code in global-cassini-hexo-flare (npm)

MAL-2025-185958

Malicious code in byte-orchestrate-wind-water-private (npm)