Supply Chain Incidents

MAL-2025-186356

Malicious code in cosmology-schema-morgan-canopus (npm)

MAL-2025-189281

Malicious code in root-resolve-wind-stub-interface (npm)

MAL-2025-187547

Malicious code in iota-stub-wind-quick-promise (npm)

MAL-2025-186421

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

MAL-2025-187013

Malicious code in forever-npm-sociobiology-cassini (npm)

MAL-2025-188767

Malicious code in polaris-publish-vortex-jekyll (npm)

MAL-2025-189811

Malicious code in tardigrade-mini-css-extract-plugin-nightwatch-blueshift (npm)

MAL-2025-188251

Malicious code in neutronstar-holography-greatfilter-miranda (npm)

MAL-2025-188100

Malicious code in module-fornax-elara-mongodb (npm)

MAL-2025-188700

Malicious code in pino-cygnus-eris-odin (npm)

MAL-2025-185837

Malicious code in biotechnology-corvus-phoebe-inquirer (npm)

MAL-2025-188423

Malicious code in omicron-thread-report-query-book (npm)

MAL-2025-187048

Malicious code in framework-triton-string-farout (npm)

MAL-2025-189709

Malicious code in subduction-exec-redis-gatsby (npm)

MAL-2025-187610

Malicious code in jovian-development-meissa-configstore (npm)

MAL-2025-186477

Malicious code in dagda-tectonophysics-materialize-astrometry (npm)

MAL-2025-188365

Malicious code in nu-grid-import-chi-assert (npm)

MAL-2025-188132

Malicious code in mu-kernel-phi-transpile-node (npm)

MAL-2025-186504

Malicious code in decompress-deserialize-nu-new-emulate (npm)

MAL-2025-185905

Malicious code in boson-style-loader-less-loader-superflare (npm)

MAL-2025-185524

Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm)

MAL-2025-186407

Malicious code in csrf-callisto-hapi-nextjs (npm)

MAL-2025-186251

Malicious code in commitlint-config-angular-init-miranda-luna (npm)

MAL-2025-187537

Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)