Supply Chain Incidents

MAL-2025-190450

Malicious code in zenobia-google-readable-paleobotany (npm)

MAL-2025-189406

Malicious code in sed-sigma-encrypt-catch-warn (npm)

MAL-2025-189143

Malicious code in rehype-janus-nebula-quito (npm)

MAL-2025-186908

Malicious code in exoplanet-xerxes-interstellarmedium-octans (npm)

MAL-2025-189731

Malicious code in sun-bad-assert-secure-protected (npm)

MAL-2025-186671

Malicious code in easy-kernel-deserialize-public-await (npm)

MAL-2025-186291

Malicious code in container-encrypt-kappa-virtualize-old (npm)

MAL-2025-187347

Malicious code in hermes-venus-cosmos-rest (npm)

MAL-2025-185373

Malicious code in acamar-higgs-izar-deneb (npm)

MAL-2025-188512

Malicious code in paleoclimatology-jsonp-troposphere-nodejs (npm)

MAL-2025-185951

Malicious code in bunyan-resonance-mensa-concurrently (npm)

MAL-2025-185743

Malicious code in balance-decompress-authorize-query-thread (npm)

MAL-2025-190478

Malicious code in zeta-cold-notify-fire-easy (npm)

MAL-2025-185962

Malicious code in cache-hercules-xerxes-commitizen (npm)

MAL-2025-187809

Malicious code in lint-markdownlint-sedimentology-winston (npm)

MAL-2025-189361

Malicious code in saturnology-enceladus-jest-xml (npm)

MAL-2025-185969

Malicious code in cache-simple-awk-sudo-class (npm)

MAL-2025-185782

Malicious code in beta-key-promise-socket-file (npm)

MAL-2025-189920

Malicious code in thread-link-code-stack-old (npm)

MAL-2025-189275

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-bootes-polaris (npm)

MAL-2025-189975

Malicious code in transhumanism-registry-nucleosynthesis-axios (npm)

MAL-2025-189886

Malicious code in test-playwright-primatology-asteroid (npm)

MAL-2025-189950

Malicious code in toml-slidev-nebula-antares (npm)

MAL-2025-186953

Malicious code in fermiparadox-graviton-brane-membrane (npm)