Supply Chain Incidents

MAL-2025-185967

Malicious code in cache-phi-public-info-sed (npm)

MAL-2025-189712

Malicious code in subduction-pulsar-yaml-janus (npm)

MAL-2025-187922

Malicious code in markdown-cors-janus-dotenv-parse-variables (npm)

MAL-2025-188178

Malicious code in native-electron-builder-nashira-tachyon (npm)

MAL-2025-186127

Malicious code in chariklo-dysonswarm-yildun-adonis (npm)

MAL-2025-188913

Malicious code in proxima-hugo-pm2-phoebe (npm)

MAL-2025-188653

Malicious code in phenomic-got-norma-gravity (npm)

MAL-2025-189768

Malicious code in supernova-phylogenetics-terser-abiogenesis (npm)

MAL-2025-187831

Malicious code in load-protected-file-index-analyze (npm)

MAL-2025-187914

Malicious code in magnetosphere-hydra-aurora-hyperion (npm)

MAL-2025-189507

Malicious code in singularity-bunyan-eslint-config-publish (npm)

MAL-2025-189256

Malicious code in rocket-dynamo-supervisor-winston (npm)

MAL-2025-186627

Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

MAL-2025-186236

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

MAL-2025-187540

Malicious code in iota-less-loader-commitlint-config-angular-private (npm)

MAL-2025-188919

Malicious code in proxima-shelljs-spinner-brane (npm)

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

MAL-2025-185712

Malicious code in axios-astro-html-webpack-plugin-algol (npm)

MAL-2025-190434

Malicious code in yildun-mesosphere-redis-spectron (npm)

MAL-2025-185606

Malicious code in astrometry-request-semantic-ui-hermes (npm)

MAL-2025-190315

Malicious code in wezen-paleoanthropology-betelgeuse-asthenosphere (npm)

MAL-2025-189846

Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)