Supply Chain Incidents

MAL-2025-187954

Malicious code in mdx-kaus-browserify-deimos (npm)

MAL-2025-189553

Malicious code in soap-comet-adonis-karma (npm)

MAL-2025-186084

Malicious code in chai-schema-plutology-eclipse (npm)

MAL-2025-190408

Malicious code in xo-mini-css-extract-plugin-vega-koa (npm)

MAL-2025-185808

Malicious code in biogeochemistry-multiverse-xo-regulus (npm)

MAL-2025-185539

Malicious code in archaeometry-yaml-phoebe-ophiuchus (npm)

MAL-2025-189269

Malicious code in rollup-plugin-chai-soap-terser-webpack-plugin (npm)

MAL-2025-190055

Malicious code in uninstall-semantic-ui-await-postcss (npm)

MAL-2025-186676

Malicious code in easy-throw-cron-rho-sanitize (npm)

MAL-2025-186451

Malicious code in cypress-technosignature-solarnebula-protractor (npm)

MAL-2025-185546

Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

MAL-2025-188683

Malicious code in phoenix-eleventy-io-radiant (npm)

MAL-2025-186566

Malicious code in despina-cluster-asteroid-wormhole (npm)

MAL-2025-185646

Malicious code in augmentedreality-vega-chai-cosmogenic (npm)

MAL-2025-186203

Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

MAL-2025-185806

Malicious code in big-tau-stack-root-compress (npm)

MAL-2025-188970

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

MAL-2025-186619

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

MAL-2025-186428

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

MAL-2025-185562

Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)

MAL-2025-185608

Malicious code in astrophysics-mesosphere-neptunology-xml (npm)

MAL-2025-190409

Malicious code in xo-morgan-css-loader-prompts (npm)

MAL-2025-190344

Malicious code in wormhole-gammarayburst-nanotechnology-umbriel (npm)

MAL-2025-189506

Malicious code in singularitarianism-prosthetics-wolf-exosphere (npm)