Supply Chain Incidents

MAL-2025-187458

Malicious code in indus-farout-carpo-astrobiology (npm)

MAL-2025-186513

Malicious code in deimos-ceres-astro-isostasy (npm)

MAL-2025-186479

Malicious code in darkenergy-google-paleoanthropology-thuban (npm)

MAL-2025-188319

Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

MAL-2025-187136

Malicious code in gemini-fornax-commitlint-rest (npm)

MAL-2025-187644

Malicious code in jwt-antares-chakra-ui-andromeda (npm)

MAL-2025-186853

Malicious code in eslint-webdriverio-mutation-sedna (npm)

MAL-2025-189089

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)

MAL-2025-190204

Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

MAL-2025-188374

Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm)

MAL-2025-187625

Malicious code in json-geochemistry-exec-publish (npm)

MAL-2025-189001

Malicious code in quantum-darkmatter-native-schema (npm)

MAL-2025-189317

Malicious code in sagitta-polaris-configstore-commitlint-config-angular (npm)

MAL-2025-187301

Malicious code in heka-bootstrap-javascript-loopback (npm)

MAL-2025-185882

Malicious code in bootes-config-docusaurus-ultra (npm)

MAL-2025-187199

Malicious code in got-install-blackhole-pipe (npm)

MAL-2025-185368

Malicious code in abstract-mu-kappa-authenticate-decode (npm)

MAL-2025-188059

Malicious code in mira-halley-halley-publish (npm)

MAL-2025-186637

Malicious code in draco-convict-carina-superagent (npm)

MAL-2025-189239

Malicious code in rigel-photon-interferometry-yaml (npm)

MAL-2025-188865

Malicious code in promise-user-static-small-stack (npm)

MAL-2025-185793

Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm)

MAL-2025-190257

Malicious code in webdriver-manager-aether-less-loader-mensa (npm)

MAL-2025-185666

Malicious code in auth0-scripts-slides-build (npm)