Supply Chain Incidents

MAL-2025-185966

Malicious code in cache-norma-protractor-superflare (npm)

MAL-2025-186729

Malicious code in enceladus-bionics-pulsar-izar (npm)

MAL-2025-189312

Malicious code in sagitta-frontend-eslint-config-cors (npm)

MAL-2025-189512

Malicious code in sirius-astroinformatics-ursa-futurology (npm)

MAL-2025-188009

Malicious code in metalsmith-postcss-loader-magellan-test (npm)

MAL-2025-187089

Malicious code in galaxy-xanthus-perseus-subscription (npm)

MAL-2025-190128

Malicious code in user-root-node-transpile-class (npm)

MAL-2025-188495

Malicious code in package-uninstall-scorpius-react-bootstrap (npm)

MAL-2025-186500

Malicious code in decode-export-data-cold-error (npm)

MAL-2025-189608

Malicious code in spectron-grunt-auth-europa (npm)

MAL-2025-185843

Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

MAL-2025-186541

Malicious code in dendrochronology-pm2-chromedriver-orogeny (npm)

MAL-2025-186450

Malicious code in cypress-procyon-neptune-epigenetics (npm)

MAL-2025-186619

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

MAL-2025-187377

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

MAL-2025-189409

Malicious code in sedimentology-spinner-gravity-blueshift (npm)

MAL-2025-185717

Malicious code in babel-babel-config-quark (npm)

MAL-2025-189635

Malicious code in sqlite-oauth-quito-graphql (npm)

MAL-2025-186359

Malicious code in cosmos-coronalmassejection-remark-arcturus (npm)

MAL-2025-186613

Malicious code in dotenv-metalsmith-proxima-heliophysics (npm)

MAL-2025-187435

Malicious code in import-float-omega-user-eta (npm)

MAL-2025-186583

Malicious code in development-webdriver-mocha-leda-bellatrix (npm)

MAL-2025-188762

Malicious code in polaris-interferometry-sails-convict (npm)

MAL-2025-186469

Malicious code in dagda-ganymede-fornax-ursa (npm)