Supply Chain Incidents

MAL-2025-188478

Malicious code in orogeny-fork-query-troposphere (npm)

MAL-2025-186002

Malicious code in capella-yaml-innercore-hermes (npm)

MAL-2025-185760

Malicious code in bash-unix-rho-sigma-quick (npm)

MAL-2025-189873

Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)

MAL-2025-188749

Malicious code in plutology-ariel-subscription-meissa (npm)

MAL-2025-186514

Malicious code in deimos-concurrently-outercore-browserify (npm)

MAL-2025-187315

Malicious code in helios-cressida-biogeochemistry-halley (npm)

MAL-2025-187452

Malicious code in index-grid-unix-long-kappa (npm)

MAL-2025-189268

Malicious code in rollup-plugin-async-astrobiology-spectron-webdriver (npm)

MAL-2025-187161

Malicious code in geodynamo-callback-less-eclipse (npm)

MAL-2025-188992

Malicious code in quantum-cache-nebula-radiant (npm)

MAL-2025-188761

Malicious code in polaris-build-event-dotenv-parse-variables (npm)

MAL-2025-189852

Malicious code in telesto-dotenv-safe-webdriver-mocha-jwt (npm)

MAL-2025-188522

Malicious code in paleoecology-webdriver-manager-cli-outercore (npm)

MAL-2025-185475

Malicious code in antares-superflare-transform-blackhole (npm)

MAL-2025-188978

Malicious code in puppeteer-exobiology-semantic-release-less (npm)

MAL-2025-189408

Malicious code in sedimentology-ablation-meteor-xml (npm)

MAL-2025-189161

Malicious code in release-it-apollo-norma-vuepress (npm)

MAL-2025-186364

Malicious code in cosmos-volcanology-cassini-nova (npm)

MAL-2025-190186

Malicious code in vortex-enceladus-slides-xanthus (npm)

MAL-2025-188776

Malicious code in postcss-gammarayburst-whitedwarf-archaeoastronomy (npm)

MAL-2025-189133

Malicious code in regulus-eridanus-meissa-winston (npm)

MAL-2025-188264

Malicious code in nextjs-html-webpack-plugin-express-gemini (npm)

MAL-2025-185630

Malicious code in async-registry-build-xml (npm)