Supply Chain Incidents

MAL-2025-188100

Malicious code in module-fornax-elara-mongodb (npm)

MAL-2025-187013

Malicious code in forever-npm-sociobiology-cassini (npm)

MAL-2025-187048

Malicious code in framework-triton-string-farout (npm)

MAL-2025-188074

Malicious code in miranda-janus-fornax-eris (npm)

MAL-2025-187488

Malicious code in inquirer-loop-airbnb-proxima (npm)

MAL-2025-188423

Malicious code in omicron-thread-report-query-book (npm)

MAL-2025-188373

Malicious code in nuxtjs-hugo-karma-antares (npm)

MAL-2025-187902

Malicious code in magellan-gammarayburst-passport-antares (npm)

MAL-2025-186251

Malicious code in commitlint-config-angular-init-miranda-luna (npm)

MAL-2025-188130

Malicious code in morgan-spectron-webdriver-primatology-aldebaran (npm)

MAL-2025-189571

Malicious code in socket-mock-java-rho-spy (npm)

MAL-2025-187537

Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)

MAL-2025-186247

Malicious code in commitlint-chalk-neptune-auriga (npm)

MAL-2025-190194

Malicious code in vuepress-toml-magellan-rimraf (npm)

MAL-2025-187596

Malicious code in javascript-async-enceladus-eslint-plugin (npm)

MAL-2025-188132

Malicious code in mu-kernel-phi-transpile-node (npm)

MAL-2025-186580

Malicious code in development-postcss-loader-webpack-cosmicweb (npm)

MAL-2025-187648

Malicious code in jwt-polaris-accretion-transform (npm)

MAL-2025-188338

Malicious code in nodemon-vega-umbriel-polaris (npm)

MAL-2025-188312

Malicious code in node-mu-private-new-runtime (npm)

MAL-2025-190185

Malicious code in vortex-auth0-string-holography (npm)

MAL-2025-186041

Malicious code in celeste-archaeoastronomy-despina-vuepress (npm)

MAL-2025-189689

Malicious code in stream-yildun-bootes-neutrino (npm)

MAL-2025-187211

Malicious code in graviton-hapi-less-loader-electron (npm)