Supply Chain Incidents

MAL-2025-185550

Malicious code in arcturus-sails-version-atlas (npm)

MAL-2025-189369

Malicious code in scale-deserialize-function-optimize-hot (npm)

MAL-2025-185869

Malicious code in book-boolean-runtime-grep-root (npm)

MAL-2025-189039

Malicious code in query-betelgeuse-nebula-dotenv-safe (npm)

MAL-2025-187593

Malicious code in java-simple-void-fork-sudo (npm)

MAL-2025-187281

Malicious code in hash-authorize-sanitize-signal-cloud (npm)

MAL-2025-189665

Malicious code in steganography-aether-on-envconfig (npm)

MAL-2025-187878

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm)

MAL-2025-186353

Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm)

MAL-2025-189621

Malicious code in speleology-pipe-pino-puppeteer (npm)

MAL-2025-189020

Malicious code in quark-hugo-geckodriver-ionosphere (npm)

MAL-2025-189616

Malicious code in spectron-webdriver-nodemon-sedimentology-on (npm)

MAL-2025-189660

Malicious code in static-public-omega-abstract-upsilon (npm)

MAL-2025-190190

Malicious code in vuepress-centauri-transhumanism-astrobiology (npm)

MAL-2025-186966

Malicious code in figures-mantle-docusaurus-promise (npm)

MAL-2025-186812

Malicious code in eridanus-react-bootstrap-telesto-yaml (npm)

MAL-2025-187109

Malicious code in ganymede-public-canopus-hydra (npm)

MAL-2025-185927

Malicious code in build-farout-cz-conventional-changelog-rocket (npm)

MAL-2025-187231

Malicious code in grep-zero-sigma-log-big (npm)

MAL-2025-187353

Malicious code in hexo-interstellarmedium-spinner-less (npm)

MAL-2025-185390

Malicious code in aether-foundation-request-tectonophysics (npm)

MAL-2025-188705

Malicious code in pino-pretty-kuiperbelt-vulcan-hugo (npm)

MAL-2025-190159

Malicious code in virgo-joviology-proxima-install (npm)

MAL-2025-187026

Malicious code in fork-wormhole-upgrade-geoarchaeology (npm)