Supply Chain Incidents

MAL-2025-186451

Malicious code in cypress-technosignature-solarnebula-protractor (npm)

MAL-2025-185546

Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

MAL-2025-185646

Malicious code in augmentedreality-vega-chai-cosmogenic (npm)

MAL-2025-186676

Malicious code in easy-throw-cron-rho-sanitize (npm)

MAL-2025-185562

Malicious code in ariel-semantic-release-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm)

MAL-2025-189030

Malicious code in quasar-element-ui-radioastronomy-ganymede (npm)

MAL-2025-188683

Malicious code in phoenix-eleventy-io-radiant (npm)

MAL-2025-187838

Malicious code in local-jasmine-gammarayburst-delphinus (npm)

MAL-2025-188009

Malicious code in metalsmith-postcss-loader-magellan-test (npm)

MAL-2025-186619

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

MAL-2025-188970

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

MAL-2025-186428

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

MAL-2025-186203

Malicious code in colors-eventhoriz-react-bootstrap-zooarchaeology (npm)

MAL-2025-186566

Malicious code in despina-cluster-asteroid-wormhole (npm)

MAL-2025-186939

Malicious code in farout-gatsby-install-ganymede (npm)

MAL-2025-186729

Malicious code in enceladus-bionics-pulsar-izar (npm)

MAL-2025-189373

Malicious code in schema-bunyan-magnetar-bootstrap (npm)

MAL-2025-187089

Malicious code in galaxy-xanthus-perseus-subscription (npm)

MAL-2025-185806

Malicious code in big-tau-stack-root-compress (npm)

MAL-2025-186593

Malicious code in docusaurus-eventhoriz-heliophysics-neutronstar (npm)

MAL-2025-187639

Malicious code in juno-uglify-js-tethys-thermochronology (npm)

MAL-2025-187377

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

MAL-2025-186621

Malicious code in dotenv-safe-jovian-astroinformatics-ablation (npm)

MAL-2025-187999

Malicious code in meta-grep-stack-serialize-authenticate (npm)