Supply Chain Incidents

MAL-2025-185958

Malicious code in byte-orchestrate-wind-water-private (npm)

MAL-2025-188939

Malicious code in public-jovian-solarnebula-lacerta (npm)

MAL-2025-189918

Malicious code in thread-compile-parse-decrypt-air (npm)

MAL-2025-189297

Malicious code in runtime-promise-assert-async-serialize (npm)

MAL-2025-189596

Malicious code in spawn-miranda-publish-galaxy (npm)

MAL-2025-186463

Malicious code in daemon-container-rain-route-reject (npm)

MAL-2025-185690

Malicious code in await-async-cluster-terser-webpack-plugin (npm)

MAL-2025-187882

Malicious code in luna-zephyr-hugo-fusion (npm)

MAL-2025-188884

Malicious code in protected-old-compile-java-enum (npm)

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

MAL-2025-190361

Malicious code in xanthus-zenobia-entanglement-prompts (npm)

MAL-2025-187011

Malicious code in forever-heka-polaris-elektra (npm)

MAL-2025-187489

Malicious code in inquirer-quasar-polaris-aquarius (npm)

MAL-2025-189022

Malicious code in quark-loopback-palynology-cypress (npm)

MAL-2025-187240

Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)

MAL-2025-188895

Malicious code in protoplanetarydisk-zenith-mysql-palynology (npm)

MAL-2025-186020

Malicious code in castor-callisto-miranda-quasar (npm)

MAL-2025-190318

Malicious code in whitedwarf-inquirer-csv-blitz (npm)

MAL-2025-190464

Malicious code in zephyr-hyperion-cypress-pulsar (npm)

MAL-2025-186162

Malicious code in cli-aldebaran-geodynamo-jabbah (npm)

MAL-2025-186941

Malicious code in farout-mongoose-process-kronos (npm)

MAL-2025-187678

Malicious code in kernel-stack-grep-zero-table (npm)

MAL-2025-188364

Malicious code in nu-double-import-theta-old (npm)

MAL-2025-188670

Malicious code in phoebe-cosmicweb-meteor-install (npm)