Supply Chain Incidents

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

MAL-2025-189297

Malicious code in runtime-promise-assert-async-serialize (npm)

MAL-2025-187871

Malicious code in loopback-tethys-airbnb-typeorm (npm)

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

MAL-2025-188878

Malicious code in prosthetics-janus-cosmicray-spectron (npm)

MAL-2025-188318

Malicious code in node-sass-kastra-bellatrix-express (npm)

MAL-2025-187882

Malicious code in luna-zephyr-hugo-fusion (npm)

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

MAL-2025-189046

Malicious code in quick-serialize-small-bash-delta (npm)

MAL-2025-187915

Malicious code in magnetosphere-procyon-neutronstar-cli (npm)

MAL-2025-190103

Malicious code in ursa-auth0-delphinus-nodejs (npm)

MAL-2025-185942

Malicious code in bunyan-areology-glaciology-charon (npm)

MAL-2025-188324

Malicious code in nodejs-cosmicweb-chakra-ui-vortex (npm)

MAL-2025-188158

Malicious code in mysql-cassini-unuk-middleware (npm)

MAL-2025-188884

Malicious code in protected-old-compile-java-enum (npm)

MAL-2025-190361

Malicious code in xanthus-zenobia-entanglement-prompts (npm)

MAL-2025-187108

Malicious code in ganymede-pegasus-xenobiology-pino (npm)

MAL-2025-187011

Malicious code in forever-heka-polaris-elektra (npm)

MAL-2025-187107

Malicious code in ganymede-palynology-proxima-robotics (npm)

MAL-2025-187489

Malicious code in inquirer-quasar-polaris-aquarius (npm)

MAL-2025-186941

Malicious code in farout-mongoose-process-kronos (npm)

MAL-2025-190179

Malicious code in void-fork-zero-log-code (npm)

MAL-2025-190283

Malicious code in webdriverio-thermosphere-cladistics-multiverse (npm)

MAL-2025-187617

Malicious code in joviology-heka-accretion-speleology (npm)