Supply Chain Incidents

MAL-2025-186567

Malicious code in despina-kastra-forever-supervisor (npm)

MAL-2025-187878

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm)

MAL-2025-186265

Malicious code in concurrently-configstore-lyra-perseus (npm)

MAL-2025-187967

Malicious code in meissa-ethology-centauri-fork (npm)

MAL-2025-185794

Malicious code in betelgeuse-metalsmith-frontend-tethys (npm)

MAL-2025-189712

Malicious code in subduction-pulsar-yaml-janus (npm)

MAL-2025-190488

Malicious code in zooarchaeology-mocha-markdown-neptunology (npm)

MAL-2025-185384

Malicious code in adonis-child-process-pegasus-repository (npm)

MAL-2025-186064

Malicious code in centaurus-neptune-css-loader-lynx (npm)

MAL-2025-187722

Malicious code in lacerta-style-loader-mini-css-extract-plugin-less (npm)

MAL-2025-189721

Malicious code in subscription-firebase-buffer-json (npm)

MAL-2025-185509

Malicious code in apollo-spinner-solis-rigel (npm)

MAL-2025-188252

Malicious code in neutronstar-native-dynamo-hydra (npm)

MAL-2025-187021

Malicious code in fork-omicron-socket-easy-array (npm)

MAL-2025-188343

Malicious code in norma-sagitta-bellatrix-postgres (npm)

MAL-2025-190304

Malicious code in weywot-resolvers-vuepress-rollup (npm)

MAL-2025-187599

Malicious code in javascript-magnetar-epimetheus-figures (npm)

MAL-2025-186051

Malicious code in centauri-lyra-prompts-commitlint (npm)

MAL-2025-188417

Malicious code in omicron-enum-link-permission-double (npm)

MAL-2025-188582

Malicious code in passport-semantic-ui-miranda-dotenv-safe (npm)

MAL-2025-187837

Malicious code in local-farout-transform-chai (npm)

MAL-2025-189194

Malicious code in resolvers-auth0-version-charon (npm)

MAL-2025-185967

Malicious code in cache-phi-public-info-sed (npm)

MAL-2025-190158

Malicious code in virgo-framework-dependencies-firebase (npm)