Supply Chain Incidents

MAL-2025-189541

Malicious code in slidev-supernova-pavo-zephyr (npm)

MAL-2025-189039

Malicious code in query-betelgeuse-nebula-dotenv-safe (npm)

MAL-2025-186086

Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)

MAL-2025-189124

Malicious code in registry-apex-seismology-ichnology (npm)

MAL-2025-188432

Malicious code in oortcloud-lint-weywot-luna (npm)

MAL-2025-186393

Malicious code in cryonics-cypress-stream-lithosphere (npm)

MAL-2025-187086

Malicious code in galaxy-bellatrix-quito-kastra (npm)

MAL-2025-185550

Malicious code in arcturus-sails-version-atlas (npm)

MAL-2025-189298

Malicious code in runtime-short-fork-yaml-pipe (npm)

MAL-2025-189171

Malicious code in remark-ceres-version-chariklo (npm)

MAL-2025-188885

Malicious code in protected-permission-table-warn-dog (npm)

MAL-2025-186835

Malicious code in eslint-config-jovian-middleware-init (npm)

MAL-2025-185902

Malicious code in boson-fornax-redshift-andromeda (npm)

MAL-2025-190305

Malicious code in weywot-tool-eslint-config-dotenv (npm)

MAL-2025-190179

Malicious code in void-fork-zero-log-code (npm)

MAL-2025-187973

Malicious code in meissa-pavo-asthenosphere-aurora (npm)

MAL-2025-187042

Malicious code in foundation-transport-xenobiology-commitlint-config-angular (npm)

MAL-2025-187344

Malicious code in hermes-dactyl-canopus-flare (npm)

MAL-2025-189523

Malicious code in sirius-scorpius-sirius-parsec (npm)

MAL-2025-190395

Malicious code in xml-ganymede-blackhole-chalk (npm)

MAL-2025-186189

Malicious code in cluster-volcanology-eslint-plugin-singularity (npm)

MAL-2025-189183

Malicious code in report-serialize-rho-public-file (npm)

MAL-2025-185823

Malicious code in biomimicry-decoherence-paleomagnetism-despina (npm)

MAL-2025-186309

Malicious code in cordelia-websockets-yakutsk-quark (npm)