Supply Chain Incidents

MAL-2025-189734

Malicious code in sun-kernel-nu-tree-simulate (npm)

MAL-2025-188192

Malicious code in nconf-middleware-extremophile-cosmicweb (npm)

MAL-2025-189517

Malicious code in sirius-miranda-astrometry-exoplanetology (npm)

MAL-2025-187777

Malicious code in library-dotenv-safe-gridsome-singularity (npm)

MAL-2025-187810

Malicious code in lint-nuxtjs-babel-socketio (npm)

MAL-2025-188543

Malicious code in palynology-singularity-multiverse-writable (npm)

MAL-2025-187905

Malicious code in magellan-neptunology-extremophile-janus (npm)

MAL-2025-185546

Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

MAL-2025-187923

Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

MAL-2025-188683

Malicious code in phoenix-eleventy-io-radiant (npm)

MAL-2025-185468

Malicious code in antares-jsonp-charon-europa (npm)

MAL-2025-186619

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

MAL-2025-188970

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

MAL-2025-189646

Malicious code in standard-cygnus-quasarjet-joviology (npm)

MAL-2025-187001

Malicious code in float-new-route-benchmark-async (npm)

MAL-2025-186428

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

MAL-2025-186017

Malicious code in cassini-terser-prettier-mysql (npm)

MAL-2025-188876

Malicious code in prompts-xanthus-blitz-eslint (npm)

MAL-2025-186457

Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics (npm)

MAL-2025-186850

Malicious code in eslint-plugin-weywot-bootes-cypress (npm)

MAL-2025-189412

Malicious code in sedna-jest-init-delphinus (npm)

MAL-2025-186111

Malicious code in changelog-hugo-fusion-tectonic (npm)

MAL-2025-187693

Malicious code in kinetic-ora-bootstrap-redshift (npm)

MAL-2025-185703

Malicious code in awk-encode-good-byte-uglify (npm)