Supply Chain Incidents

MAL-2025-186624

Malicious code in dotenv-safe-parsec-soap-polaris (npm)

MAL-2025-186985

Malicious code in finally-stack-error-cold-assert (npm)

MAL-2025-187602

Malicious code in jekyll-less-npm-local (npm)

MAL-2025-186866

Malicious code in europa-augmentedreality-redgiant-halley (npm)

MAL-2025-187324

Malicious code in helmet-neutronstar-xo-xerxes (npm)

MAL-2025-185903

Malicious code in boson-hugo-cosmology-mineralogy (npm)

MAL-2025-188451

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

MAL-2025-189222

Malicious code in restart-warp-webdriver-mocha-sync (npm)

MAL-2025-188654

Malicious code in phenomic-loopback-rigel-mechatronics (npm)

MAL-2025-190219

Malicious code in warp-boson-callback-supercluster (npm)

MAL-2025-186585

Malicious code in dione-cressida-schema-spectron (npm)

MAL-2025-186708

Malicious code in elektra-jekyll-ini-async (npm)

MAL-2025-186133

Malicious code in chi-bad-deserialize-throw-static (npm)

MAL-2025-189431

Malicious code in selenium-halley-algol-init (npm)

MAL-2025-188960

Malicious code in publish-vuepress-sails-foundation (npm)

MAL-2025-185484

Malicious code in antimatter-slidev-install-void (npm)

MAL-2025-189623

Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

MAL-2025-185408

Malicious code in airbnb-mini-css-extract-plugin-centauri-soap (npm)

MAL-2025-187198

Malicious code in got-cosmicweb-canopus-halley (npm)

MAL-2025-188915

Malicious code in proxima-neptune-altair-neptune (npm)

MAL-2025-188516

Malicious code in paleoclimatology-paleoanthropology-supercluster-proxima (npm)

MAL-2025-187897

Malicious code in magellan-augmentedreality-webdriver-mocha-blitz (npm)

MAL-2025-188111

Malicious code in mongoose-cordelia-hawkingradiation-antares (npm)

MAL-2025-186825

Malicious code in error-error-authorize-phi-mock (npm)