Supply Chain Incidents

MAL-2025-189117

Malicious code in refactor-cat-epsilon-interface-monitor (npm)

MAL-2025-189963

Malicious code in transform-command-cors-parcel (npm)

MAL-2025-186383

Malicious code in cross-env-geochemistry-global-juno (npm)

MAL-2025-187176

Malicious code in global-barnard-protoplanetarydisk-quantum-computing (npm)

MAL-2025-188266

Malicious code in nextjs-quark-supercluster-nebula (npm)

MAL-2025-188432

Malicious code in oortcloud-lint-weywot-luna (npm)

MAL-2025-188731

Malicious code in planckscale-ora-envconfig-antares (npm)

MAL-2025-187109

Malicious code in ganymede-public-canopus-hydra (npm)

MAL-2025-186770

Malicious code in enum-small-tau-sun-orchestrate (npm)

MAL-2025-187231

Malicious code in grep-zero-sigma-log-big (npm)

MAL-2025-190159

Malicious code in virgo-joviology-proxima-install (npm)

MAL-2025-187818

Malicious code in lint-staged-tailwindcss-altair-dotenv-safe (npm)

MAL-2025-188885

Malicious code in protected-permission-table-warn-dog (npm)

MAL-2025-190179

Malicious code in void-fork-zero-log-code (npm)

MAL-2025-189151

Malicious code in reject-static-theta-info-try (npm)

MAL-2025-188363

Malicious code in npm-publish-cross-env-jest (npm)

MAL-2025-187923

Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

MAL-2025-187660

Malicious code in kappa-nu-daemon-async-bad (npm)

MAL-2025-186608

Malicious code in dorado-jest-gatsby-fornax (npm)

MAL-2025-187797

Malicious code in link-theta-float-class-balance (npm)

MAL-2025-187344

Malicious code in hermes-dactyl-canopus-flare (npm)

MAL-2025-186309

Malicious code in cordelia-websockets-yakutsk-quark (npm)

MAL-2025-187039

Malicious code in foundation-await-pavo-chariklo (npm)

MAL-2025-187653

Malicious code in kappa-awk-deploy-simulate-encrypt (npm)