Supply Chain Incidents

MAL-2025-185766

Malicious code in bellatrix-command-testcafe-pino-pretty (npm)

MAL-2025-188362

Malicious code in npm-global-sublimation-augmentedreality (npm)

MAL-2025-186609

Malicious code in dorado-norma-sequelize-hydrogeology (npm)

MAL-2025-190158

Malicious code in virgo-framework-dependencies-firebase (npm)

MAL-2025-187136

Malicious code in gemini-fornax-commitlint-rest (npm)

MAL-2025-186234

Malicious code in command-prettier-stylelint-server-schema (npm)

MAL-2025-185793

Malicious code in betelgeuse-gammarayburst-puppeteer-rehype (npm)

MAL-2025-189239

Malicious code in rigel-photon-interferometry-yaml (npm)

MAL-2025-186797

Malicious code in equinox-kastra-pulsar-avior (npm)

MAL-2025-185666

Malicious code in auth0-scripts-slides-build (npm)

MAL-2025-189001

Malicious code in quantum-darkmatter-native-schema (npm)

MAL-2025-187760

Malicious code in less-mineralogy-airbnb-tardigrade (npm)

MAL-2025-187490

Malicious code in inquirer-resonance-stratosphere-zenobia (npm)

MAL-2025-187232

Malicious code in grid-mu-cloud-signal-cat (npm)

MAL-2025-187402

Malicious code in hydra-markdown-pdf-resolvers-postcss (npm)

MAL-2025-188059

Malicious code in mira-halley-halley-publish (npm)

MAL-2025-186652

Malicious code in dynamo-ganymede-init-sequelize (npm)

MAL-2025-189407

Malicious code in sed-sigma-mock-finally-virtualize (npm)

MAL-2025-185368

Malicious code in abstract-mu-kappa-authenticate-decode (npm)

MAL-2025-187845

Malicious code in log-delta-daemon-finally-minify (npm)

MAL-2025-188319

Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

MAL-2025-189849

Malicious code in tectonophysics-pegasus-neuromorphic-enceladus (npm)

MAL-2025-188865

Malicious code in promise-user-static-small-stack (npm)

MAL-2025-185841

Malicious code in biotechnology-planckscale-nightwatch-bellatrix (npm)