Supply Chain Incidents

MAL-2025-188694

Malicious code in pi-compress-grid-class-fast (npm)

MAL-2025-185435

Malicious code in alpha-view-grep-abstract-pipe (npm)

MAL-2025-186001

Malicious code in capella-tethys-lynx-antimatter (npm)

MAL-2025-188285

Malicious code in nightwatch-global-subduction-eslint-plugin (npm)

MAL-2025-188243

Malicious code in neuromorphic-cybernetics-cosmogenic-neutronstar (npm)

MAL-2025-186400

Malicious code in cryovolcano-miranda-blueshift-rimraf (npm)

MAL-2025-185633

Malicious code in async-yonder-hadron-meteor (npm)

MAL-2025-186392

Malicious code in cryonics-convict-tectonophysics-interstellarmedium (npm)

MAL-2025-186255

Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)

MAL-2025-189899

Malicious code in testcafe-pegasus-neptune-remark (npm)

MAL-2025-187598

Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm)

MAL-2025-185433

Malicious code in alpha-integer-pi-assert-export (npm)

MAL-2025-189181

Malicious code in report-good-error-user-parse (npm)

MAL-2025-186557

Malicious code in dependencies-taurus-dotenv-safe-ora (npm)

MAL-2025-186506

Malicious code in decompress-simple-lambda-container-meta (npm)

MAL-2025-187300

Malicious code in heka-antares-vulcan-commitizen (npm)

MAL-2025-187392

Malicious code in husky-despina-readable-oscillation (npm)

MAL-2025-189873

Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)

MAL-2025-188397

Malicious code in odin-fetch-arcturus-cressida (npm)

MAL-2025-187570

Malicious code in janus-enceladus-supernova-panspermia (npm)

MAL-2025-187866

Malicious code in loop-quito-hyperion-centauri (npm)

MAL-2025-186900

Malicious code in exobiology-chalk-xml-atlas (npm)

MAL-2025-186360

Malicious code in cosmos-framework-gacrux-pm2 (npm)

MAL-2025-189264

Malicious code in rocket-polaris-prettier-schema (npm)