Supply Chain Incidents

MAL-2025-186813

Malicious code in eridanus-rigel-cosmiconfig-pino-pretty (npm)

MAL-2025-190194

Malicious code in vuepress-toml-magellan-rimraf (npm)

MAL-2025-186247

Malicious code in commitlint-chalk-neptune-auriga (npm)

MAL-2025-186777

Malicious code in epigenetics-cosmology-radiometric-fornax (npm)

MAL-2025-188167

Malicious code in nanotechnology-eventhoriz-iota-commitizen (npm)

MAL-2025-188312

Malicious code in node-mu-private-new-runtime (npm)

MAL-2025-185911

Malicious code in brane-venus-betelgeuse-altair (npm)

MAL-2025-189709

Malicious code in subduction-exec-redis-gatsby (npm)

MAL-2025-185460

Malicious code in antares-apex-robotics-quito (npm)

MAL-2025-189076

Malicious code in rain-interface-java-bundle-wind (npm)

MAL-2025-190185

Malicious code in vortex-auth0-string-holography (npm)

MAL-2025-188253

Malicious code in neutronstar-quark-dotenv-safe-koa (npm)

MAL-2025-186399

Malicious code in cryovolcano-grus-ini-proxima (npm)

MAL-2025-185941

Malicious code in bundle-theta-virtualize-sanitize-sigma (npm)

MAL-2025-186510

Malicious code in decrypt-sun-mock-rain-debug (npm)

MAL-2025-187537

Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)

MAL-2025-189074

Malicious code in radiometric-vega-element-ui-oortcloud (npm)

MAL-2025-188146

Malicious code in multiverse-jsonp-mdx-commitlint-config-angular (npm)

MAL-2025-186466

Malicious code in daemon-old-mu-interpret-deserialize (npm)

MAL-2025-187534

Malicious code in iota-betelgeuse-rest-sass-loader (npm)

MAL-2025-187142

Malicious code in gemini-postgres-rehype-sagitta (npm)

MAL-2025-186922

Malicious code in export-hot-cold-orchestrate-awk (npm)

MAL-2025-186091

Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

MAL-2025-186982

Malicious code in final-uglify-decrypt-enum-data (npm)