Supply Chain Incidents

MAL-2025-188631

Malicious code in perseus-query-halley-selenology (npm)

MAL-2025-187199

Malicious code in got-install-blackhole-pipe (npm)

MAL-2025-189256

Malicious code in rocket-dynamo-supervisor-winston (npm)

MAL-2025-190437

Malicious code in yonder-less-loader-ini-auth (npm)

MAL-2025-188835

Malicious code in process-loopback-cosmos-leda (npm)

MAL-2025-187664

Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)

MAL-2025-185766

Malicious code in bellatrix-command-testcafe-pino-pretty (npm)

MAL-2025-189007

Malicious code in quantum-sirius-spinner-sirius (npm)

MAL-2025-185416

Malicious code in aldebaran-lyra-magellan-bulma (npm)

MAL-2025-186242

Malicious code in commitizen-playwright-selenium-publish (npm)

MAL-2025-186675

Malicious code in easy-serialize-omicron-mu-assert (npm)

MAL-2025-185860

Malicious code in blitz-nuxtjs-cosmicray-paleoceanography (npm)

MAL-2025-188381

Malicious code in oberon-mdx-hydrogeology-bunyan (npm)

MAL-2025-186417

Malicious code in css-loader-rehype-toml-version (npm)

MAL-2025-188059

Malicious code in mira-halley-halley-publish (npm)

MAL-2025-185368

Malicious code in abstract-mu-kappa-authenticate-decode (npm)

MAL-2025-189571

Malicious code in socket-mock-java-rho-spy (npm)

MAL-2025-186442

Malicious code in cygnus-tool-update-xenos (npm)

MAL-2025-186637

Malicious code in draco-convict-carina-superagent (npm)

MAL-2025-186394

Malicious code in cryonics-jest-tachyon-hydra (npm)

MAL-2025-187136

Malicious code in gemini-fornax-commitlint-rest (npm)

MAL-2025-188865

Malicious code in promise-user-static-small-stack (npm)

MAL-2025-188796

Malicious code in prettier-json-publish-quito (npm)

MAL-2025-190257

Malicious code in webdriver-manager-aether-less-loader-mensa (npm)