Supply Chain Incidents

MAL-2025-185788

Malicious code in betelgeuse-cassini-lyra-firebase (npm)

MAL-2025-188027

Malicious code in meteor-lacerta-fornax-cryonics (npm)

MAL-2025-190429

Malicious code in yaml-phoenix-sequelize-redshift (npm)

MAL-2025-188432

Malicious code in oortcloud-lint-weywot-luna (npm)

MAL-2025-189394

Malicious code in secure-big-user-unix-private (npm)

MAL-2025-187688

Malicious code in kinetic-backend-technocracy-archaeometry (npm)

MAL-2025-187109

Malicious code in ganymede-public-canopus-hydra (npm)

MAL-2025-187220

Malicious code in greatfilter-greatfilter-kastra-eslint-config (npm)

MAL-2025-190159

Malicious code in virgo-joviology-proxima-install (npm)

MAL-2025-187231

Malicious code in grep-zero-sigma-log-big (npm)

MAL-2025-186713

Malicious code in element-ui-fermiparadox-carpo-orogeny (npm)

MAL-2025-187517

Malicious code in interstellarmedium-pino-bulma-darkenergy (npm)

MAL-2025-188801

Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm)

MAL-2025-189893

Malicious code in testcafe-canopus-graphql-markdownlint (npm)

MAL-2025-186216

Malicious code in comet-mutation-commitlint-csrf (npm)

MAL-2025-189702

Malicious code in stub-emulate-decompress-view-sandbox (npm)

MAL-2025-187344

Malicious code in hermes-dactyl-canopus-flare (npm)

MAL-2025-190179

Malicious code in void-fork-zero-log-code (npm)

MAL-2025-188300

Malicious code in nightwatch-wolf-kastra-seismology (npm)

MAL-2025-188885

Malicious code in protected-permission-table-warn-dog (npm)

MAL-2025-187631

Malicious code in jsonp-lacerta-eris-octans (npm)

MAL-2025-186660

Malicious code in dysonswarm-joviology-node-sass-troposphere (npm)

MAL-2025-186309

Malicious code in cordelia-websockets-yakutsk-quark (npm)

MAL-2025-189573

Malicious code in socket-table-grid-sigma-deserialize (npm)