Supply Chain Incidents

MAL-2025-185468

Malicious code in antares-jsonp-charon-europa (npm)

MAL-2025-186364

Malicious code in cosmos-volcanology-cassini-nova (npm)

MAL-2025-188776

Malicious code in postcss-gammarayburst-whitedwarf-archaeoastronomy (npm)

MAL-2025-188351

Malicious code in nova-astro-playwright-mira (npm)

MAL-2025-188693

Malicious code in pi-authenticate-cold-encrypt-alert (npm)

MAL-2025-187702

Malicious code in koa-vega-zenith-canopus (npm)

MAL-2025-189258

Malicious code in rocket-fomalhaut-sirius-kronos (npm)

MAL-2025-187057

Malicious code in function-finally-beta-fast-deploy (npm)

MAL-2025-187556

Malicious code in izar-mini-css-extract-plugin-hercules-nightmare (npm)

MAL-2025-186125

Malicious code in chariklo-areology-changelog-arcturus (npm)

MAL-2025-185405

Malicious code in airbnb-ariel-spectroscopy-ursa (npm)

MAL-2025-188893

Malicious code in protoplanetarydisk-prettier-stylelint-jabbah-sagitta (npm)

MAL-2025-187379

Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)

MAL-2025-186714

Malicious code in element-ui-jabbah-chalk-enceladus (npm)

MAL-2025-186927

Malicious code in express-cors-dysonswarm-async (npm)

MAL-2025-186160

Malicious code in class-kernel-lambda-void-try (npm)

MAL-2025-188550

Malicious code in panspermia-winston-phoebe-adonis (npm)

MAL-2025-186382

Malicious code in cross-env-flare-hyperion-meissa (npm)

MAL-2025-189998

Malicious code in triton-nconf-sublimation-grus (npm)

MAL-2025-187001

Malicious code in float-new-route-benchmark-async (npm)

MAL-2025-190374

Malicious code in xenon-proxima-whitedwarf-jsonp (npm)

MAL-2025-185886

Malicious code in bootes-transform-nuxtjs-proxima (npm)

MAL-2025-186017

Malicious code in cassini-terser-prettier-mysql (npm)

MAL-2025-189513

Malicious code in sirius-blaze-decoherence-scripts (npm)