Supply Chain Incidents

MAL-2025-186884

Malicious code in eventhoriz-yonder-heliophysics-spawn (npm)

MAL-2025-187540

Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

MAL-2025-186741

Malicious code in encode-route-deserialize-eta-export (npm)

MAL-2025-186345

Malicious code in cosmochemistry-gemini-release-it-neuromorphic (npm)

MAL-2025-189509

Malicious code in singularity-kuiperbelt-loopback-fermiparadox (npm)

MAL-2025-188505

Malicious code in paleoceanography-shelljs-umbriel-galaxy (npm)

MAL-2025-185565

Malicious code in array-async-export-lambda-transpile (npm)

MAL-2025-190201

Malicious code in vuetify-thermochronology-csv-cryovolcano (npm)

MAL-2025-189768

Malicious code in supernova-phylogenetics-terser-abiogenesis (npm)

MAL-2025-188913

Malicious code in proxima-hugo-pm2-phoebe (npm)

MAL-2025-188178

Malicious code in native-electron-builder-nashira-tachyon (npm)

MAL-2025-188653

Malicious code in phenomic-got-norma-gravity (npm)

MAL-2025-188922

Malicious code in proxima-uglify-js-biomimicry-quasar (npm)

MAL-2025-186330

Malicious code in cosmiconfig-gatsby-janus-slides (npm)

MAL-2025-185606

Malicious code in astrometry-request-semantic-ui-hermes (npm)

MAL-2025-185712

Malicious code in axios-astro-html-webpack-plugin-algol (npm)

MAL-2025-190215

Malicious code in warn-shell-async-virtualize-mu (npm)

MAL-2025-189507

Malicious code in singularity-bunyan-eslint-config-publish (npm)

MAL-2025-185491

Malicious code in apex-gulp-npm-dione (npm)

MAL-2025-186236

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

MAL-2025-186627

Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

MAL-2025-190095

Malicious code in upsilon-sandbox-static-module-validate (npm)

MAL-2025-187790

Malicious code in link-cron-simulate-assert-log (npm)