Supply Chain Incidents

MAL-2025-187410

Malicious code in hyperion-heka-promise-taurus (npm)

MAL-2025-186146

Malicious code in child-process-stratigraphy-subduction-node-sass (npm)

MAL-2025-188812

Malicious code in prettier-stylelint-soap-acamar-build (npm)

MAL-2025-190084

Malicious code in upgrade-hexo-gulp-cosmogenic (npm)

MAL-2025-186044

Malicious code in celeste-selenology-socketio-carpo (npm)

MAL-2025-188378

Malicious code in oauth-neptunology-lint-server (npm)

MAL-2025-190281

Malicious code in webdriverio-npm-supervisor-blaze (npm)

MAL-2025-188156

Malicious code in mutation-promise-xenon-fermion (npm)

MAL-2025-185455

Malicious code in andromeda-grus-leda-leda (npm)

MAL-2025-186644

Malicious code in duplex-airbnb-canopus-gammarayburst (npm)

MAL-2025-189692

Malicious code in string-compile-module-benchmark-report (npm)

MAL-2025-185507

Malicious code in apollo-sirius-upgrade-iota (npm)

MAL-2025-187916

Malicious code in magnetosphere-quito-isostasy-despina (npm)

MAL-2025-189543

Malicious code in slow-data-moon-object-serialize (npm)

MAL-2025-189815

Malicious code in tau-float-string-reject-byte (npm)

MAL-2025-186136

Malicious code in chi-iota-decompress-sed-emulate (npm)

MAL-2025-189628

Malicious code in spinner-rest-standard-writable (npm)

MAL-2025-188808

Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin (npm)

MAL-2025-186945

Malicious code in fast-java-stub-void-bash (npm)

MAL-2025-189196

Malicious code in resolvers-forever-mongoose-multiverse (npm)

MAL-2025-190163

Malicious code in virtualize-reject-secure-finally-function (npm)

MAL-2025-188655

Malicious code in phenomic-mesosphere-multiverse-paleoecology (npm)

MAL-2025-188121

Malicious code in moon-omicron-stub-long-book (npm)

MAL-2025-190188

Malicious code in vuepress-apollo-kuiperbelt-hercules (npm)