Supply Chain Incidents

MAL-2025-188857

Malicious code in promise-dynamo-umbriel-jwt (npm)

MAL-2025-186411

Malicious code in csrf-mutation-oauth-convict (npm)

MAL-2025-188707

Malicious code in pino-pretty-prettier-sequelize-figures (npm)

MAL-2025-186002

Malicious code in capella-yaml-innercore-hermes (npm)

MAL-2025-189009

Malicious code in quantumfoam-biomimicry-sedna-zenith (npm)

MAL-2025-187412

Malicious code in hyperion-inquirer-galaxy-quantumfoam (npm)

MAL-2025-186653

Malicious code in dynamo-leda-registry-unuk (npm)

MAL-2025-188339

Malicious code in non-blocking-luna-axios-pegasus (npm)

MAL-2025-187309

Malicious code in heka-relay-grunt-gammarayburst (npm)

MAL-2025-189561

Malicious code in soap-winston-thuban-pyxis (npm)

MAL-2025-185629

Malicious code in async-readable-solis-leda (npm)

MAL-2025-186062

Malicious code in centaurus-gammarayburst-rimraf-glaciology (npm)

MAL-2025-187537

Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)

MAL-2025-188749

Malicious code in plutology-ariel-subscription-meissa (npm)

MAL-2025-188901

Malicious code in protractor-nightwatch-schema-bootstrap (npm)

MAL-2025-188933

Malicious code in public-auth-hermes-command (npm)

MAL-2025-185861

Malicious code in blueshift-canopus-leda-higgs (npm)

MAL-2025-189870

Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo (npm)

MAL-2025-190137

Malicious code in venus-dactyl-publish-markdownlint (npm)

MAL-2025-188851

Malicious code in procyon-yaml-figures-toml (npm)

MAL-2025-188978

Malicious code in puppeteer-exobiology-semantic-release-less (npm)

MAL-2025-186286

Malicious code in configstore-mensa-airbnb-quark (npm)

MAL-2025-188010

Malicious code in metalsmith-xanthus-react-bootstrap-sequelize (npm)

MAL-2025-186364

Malicious code in cosmos-volcanology-cassini-nova (npm)