Supply Chain Incidents

MAL-2025-185946

Malicious code in bunyan-jasmine-winston-geoarchaeology (npm)

MAL-2025-188151

Malicious code in mutation-cladistics-graviton-upgrade (npm)

MAL-2025-186691

Malicious code in elara-auth-enif-prettier (npm)

MAL-2025-186629

Malicious code in dotenv-semantic-ui-fusion-hexo (npm)

MAL-2025-187632

Malicious code in juno-areology-dorado-webdriver-mocha (npm)

MAL-2025-185651

Malicious code in auriga-postgres-fermion-filament (npm)

MAL-2025-189225

Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

MAL-2025-186390

Malicious code in crust-thuban-archaeogenetics-callback (npm)

MAL-2025-189901

Malicious code in testcafe-scripts-phoebe-nconf (npm)

MAL-2025-190219

Malicious code in warp-boson-callback-supercluster (npm)

MAL-2025-189155

Malicious code in relay-halley-ophiuchus-public (npm)

MAL-2025-188965

Malicious code in publish-zooarchaeology-achernar-resolvers (npm)

MAL-2025-190121

Malicious code in user-benchmark-omega-benchmark-socket (npm)

MAL-2025-188516

Malicious code in paleoclimatology-paleoanthropology-supercluster-proxima (npm)

MAL-2025-188960

Malicious code in publish-vuepress-sails-foundation (npm)

MAL-2025-187116

Malicious code in ganymede-warp-astrochemistry-jabbah (npm)

MAL-2025-189991

Malicious code in tree-awk-notify-beta-cloud (npm)

MAL-2025-189788

Malicious code in sync-vega-apex-prettier-plugin-markdown (npm)

MAL-2025-187198

Malicious code in got-cosmicweb-canopus-halley (npm)

MAL-2025-187684

Malicious code in key-orchestrate-promise-mu-bad (npm)

MAL-2025-188267

Malicious code in nextjs-radiant-proteomics-neptune (npm)

MAL-2025-188828

Malicious code in private-husky-mensa-package (npm)

MAL-2025-186825

Malicious code in error-error-authorize-phi-mock (npm)

MAL-2025-187357

Malicious code in hexo-steganography-cli-standard (npm)