Supply Chain Incidents

MAL-2025-185368

Malicious code in abstract-mu-kappa-authenticate-decode (npm)

MAL-2025-190268

Malicious code in webdriver-mocha-apollo-server-shelljs (npm)

MAL-2025-188319

Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

MAL-2025-188082

Malicious code in miranda-perseus-pm2-ophiuchus (npm)

MAL-2025-185882

Malicious code in bootes-config-docusaurus-ultra (npm)

MAL-2025-186513

Malicious code in deimos-ceres-astro-isostasy (npm)

MAL-2025-187060

Malicious code in fusion-astrometry-speleology-sedimentology (npm)

MAL-2025-187046

Malicious code in framework-release-it-fornax-non-blocking (npm)

MAL-2025-188059

Malicious code in mira-halley-halley-publish (npm)

MAL-2025-186637

Malicious code in draco-convict-carina-superagent (npm)

MAL-2025-189611

Malicious code in spectron-neuromorphic-crust-inquirer (npm)

MAL-2025-189512

Malicious code in sirius-astroinformatics-ursa-futurology (npm)

MAL-2025-186260

Malicious code in compile-validate-sandbox-node-async (npm)

MAL-2025-190204

Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

MAL-2025-186972

Malicious code in filament-tethys-brane-upgrade (npm)

MAL-2025-186242

Malicious code in commitizen-playwright-selenium-publish (npm)

MAL-2025-190197

Malicious code in vuetify-firebase-darkmatter-mineralogy (npm)

MAL-2025-188374

Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm)

MAL-2025-187625

Malicious code in json-geochemistry-exec-publish (npm)

MAL-2025-185906

Malicious code in brane-halley-solarnebula-stratosphere (npm)

MAL-2025-189441

Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

MAL-2025-186798

Malicious code in equinox-mira-jsonp-octans (npm)

MAL-2025-187552

Malicious code in isostasy-meteor-passport-npm (npm)

MAL-2025-187301

Malicious code in heka-bootstrap-javascript-loopback (npm)