Supply Chain Incidents

MAL-2025-188913

Malicious code in proxima-hugo-pm2-phoebe (npm)

MAL-2025-185900

Malicious code in boson-build-tachyon-solis (npm)

MAL-2025-188257

Malicious code in new-mu-sigma-float-visualize (npm)

MAL-2025-190386

Malicious code in xerxes-non-blocking-baryon-solarnebula (npm)

MAL-2025-188653

Malicious code in phenomic-got-norma-gravity (npm)

MAL-2025-186353

Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm)

MAL-2025-188010

Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)

MAL-2025-186741

Malicious code in encode-route-deserialize-eta-export (npm)

MAL-2025-188178

Malicious code in native-electron-builder-nashira-tachyon (npm)

MAL-2025-189507

Malicious code in singularity-bunyan-eslint-config-publish (npm)

MAL-2025-186627

Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

MAL-2025-186236

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

MAL-2025-188451

Malicious code in optimize-css-assets-webpack-plugin-style-loader-bellatrix-prettier-stylelint (npm)

MAL-2025-186114

Malicious code in changelog-polaris-dotenv-safe-phoebe (npm)

MAL-2025-185390

Malicious code in aether-foundation-request-tectonophysics (npm)

MAL-2025-187353

Malicious code in hexo-interstellarmedium-spinner-less (npm)

MAL-2025-189154

Malicious code in relay-dotenv-chai-ophiuchus (npm)

MAL-2025-189580

Malicious code in socketio-spawn-pyxis-nestjs (npm)

MAL-2025-188551

Malicious code in panspermia-zenobia-cryonics-galaxy (npm)

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

MAL-2025-188702

Malicious code in pino-pretty-ariel-ursa-query (npm)

MAL-2025-186853

Malicious code in eslint-webdriverio-mutation-sedna (npm)

MAL-2025-188028

Malicious code in meteor-meissa-airbnb-outercore (npm)