Supply Chain Incidents

MAL-2025-189541

Malicious code in slidev-supernova-pavo-zephyr (npm)

MAL-2025-186538

Malicious code in dendrochronology-eslint-plugin-andromeda-helios (npm)

MAL-2025-186247

Malicious code in commitlint-chalk-neptune-auriga (npm)

MAL-2025-186251

Malicious code in commitlint-config-angular-init-miranda-luna (npm)

MAL-2025-190194

Malicious code in vuepress-toml-magellan-rimraf (npm)

MAL-2025-188676

Malicious code in phoebe-sagitta-cosmiconfig-got (npm)

MAL-2025-188312

Malicious code in node-mu-private-new-runtime (npm)

MAL-2025-186666

Malicious code in earth-small-scale-simulate-static (npm)

MAL-2025-188348

Malicious code in notify-simple-theta-monitor-web (npm)

MAL-2025-188905

Malicious code in proxima-aether-quasar-xml (npm)

MAL-2025-188740

Malicious code in planetology-virgo-archaeometry-envconfig (npm)

MAL-2025-189932

Malicious code in thuban-charon-uninstall-nextjs (npm)

MAL-2025-185658

Malicious code in australis-geomorphology-adonis-babel (npm)

MAL-2025-189947

Malicious code in toml-json-express-event (npm)

MAL-2025-189856

Malicious code in telesto-publish-oberon-charon (npm)

MAL-2025-189378

Malicious code in scorpius-cryptography-tethys-library (npm)

MAL-2025-189511

Malicious code in singularity-rigel-quasarjet-husky (npm)

MAL-2025-186159

Malicious code in class-eta-lambda-hash-root (npm)

MAL-2025-186777

Malicious code in epigenetics-cosmology-radiometric-fornax (npm)

MAL-2025-187142

Malicious code in gemini-postgres-rehype-sagitta (npm)

MAL-2025-186306

Malicious code in cordelia-dione-hyperion-superposition (npm)

MAL-2025-190235

Malicious code in wasat-pulsar-exobiology-link (npm)

MAL-2025-187545

Malicious code in iota-sedna-public-webdriver-mocha (npm)

MAL-2025-189854

Malicious code in telesto-nova-zenobia-sublimation (npm)