Supply Chain Incidents

MAL-2025-188763

Malicious code in polaris-juno-taphonomy-membrane (npm)

MAL-2025-187984

Malicious code in mesosphere-achernar-paleontology-deneb (npm)

MAL-2025-187952

Malicious code in mdx-development-elara-stratosphere (npm)

MAL-2025-186455

Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm)

MAL-2025-187284

Malicious code in hash-table-enum-debug-unix (npm)

MAL-2025-190156

Malicious code in virgo-build-equinox-init (npm)

MAL-2025-187617

Malicious code in joviology-heka-accretion-speleology (npm)

MAL-2025-186724

Malicious code in emulate-signal-psi-void-root (npm)

MAL-2025-186674

Malicious code in easy-pipe-signal-proxy-uglify (npm)

MAL-2025-190017

Malicious code in typeorm-nestjs-equinox-europa (npm)

MAL-2025-188833

Malicious code in process-float-sanitize-module-import (npm)

MAL-2025-188421

Malicious code in omicron-route-beta-virtualize-void (npm)

MAL-2025-189110

Malicious code in redis-markdownlint-meteor-winston (npm)

MAL-2025-186541

Malicious code in dendrochronology-pm2-chromedriver-orogeny (npm)

MAL-2025-189370

Malicious code in scale-hot-tree-cache-execute (npm)

MAL-2025-188355

Malicious code in nova-primatology-paleoclimatology-membrane (npm)

MAL-2025-190366

Malicious code in xenobiology-materialize-epimetheus-atlas (npm)

MAL-2025-187504

Malicious code in integer-simulate-mu-class-permission (npm)

MAL-2025-185569

Malicious code in array-public-code-async-decompress (npm)

MAL-2025-187384

Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict (npm)

MAL-2025-187696

Malicious code in kinetic-upgrade-pino-sagitta (npm)

MAL-2025-185443

Malicious code in alphard-prettier-fusion-astrochemistry (npm)

MAL-2025-189733

Malicious code in sun-good-optimize-big-sandbox (npm)

MAL-2025-187821

Malicious code in lithosphere-changelog-grunt-uglify-js (npm)