Supply Chain Incidents

MAL-2025-190382

Malicious code in xenos-xanthus-celeste-react-bootstrap (npm)

MAL-2025-186372

Malicious code in cressida-yakutsk-zephyr-rollup (npm)

MAL-2025-190159

Malicious code in virgo-joviology-proxima-install (npm)

MAL-2025-189134

Malicious code in regulus-node-sass-hugo-mensa (npm)

MAL-2025-187214

Malicious code in graviton-sociobiology-tailwindcss-rollup (npm)

MAL-2025-187986

Malicious code in mesosphere-chai-hermes-eris (npm)

MAL-2025-189535

Malicious code in slidev-levels-install-jasmine (npm)

MAL-2025-186375

Malicious code in cron-rho-analyze-socket-air (npm)

MAL-2025-188801

Malicious code in prettier-plugin-markdown-aquarius-colors-antares (npm)

MAL-2025-188481

Malicious code in orogeny-rollup-heka-miranda (npm)

MAL-2025-186722

Malicious code in emulate-link-shell-async-double (npm)

MAL-2025-187959

Malicious code in mechatronics-borealis-tardigrade-init (npm)

MAL-2025-188916

Malicious code in proxima-nightmare-postgres-seismology (npm)

MAL-2025-187344

Malicious code in hermes-dactyl-canopus-flare (npm)

MAL-2025-187779

Malicious code in library-frontend-update-eclipse (npm)

MAL-2025-185587

Malicious code in astro-photon-publish-blazar (npm)

MAL-2025-187658

Malicious code in kappa-lambda-bundle-omega-bad (npm)

MAL-2025-189400

Malicious code in sed-node-shell-long-authorize (npm)

MAL-2025-185754

Malicious code in baryon-ini-biomimicry-entanglement (npm)

MAL-2025-189853

Malicious code in telesto-neptune-tethys-shelljs (npm)

MAL-2025-187688

Malicious code in kinetic-backend-technocracy-archaeometry (npm)

MAL-2025-186309

Malicious code in cordelia-websockets-yakutsk-quark (npm)

MAL-2025-190000

Malicious code in triton-proxima-impulse-dotenv-parse-variables (npm)

MAL-2025-186090

Malicious code in chakra-ui-ophiuchus-sublimation-readable (npm)