Supply Chain Incidents

MAL-2025-187287

Malicious code in hash-warn-async-private-shell (npm)

MAL-2025-186619

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

MAL-2025-188970

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

MAL-2025-186428

Malicious code in csv-dysonswarm-aether-optimize-css-assets-webpack-plugin (npm)

MAL-2025-186742

Malicious code in encrypt-bundle-test-deploy-scale (npm)

MAL-2025-186472

Malicious code in dagda-ophiuchus-koa-solarnebula (npm)

MAL-2025-185843

Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

MAL-2025-187089

Malicious code in galaxy-xanthus-perseus-subscription (npm)

MAL-2025-186729

Malicious code in enceladus-bionics-pulsar-izar (npm)

MAL-2025-189485

Malicious code in sigma-byte-minify-cache-float (npm)

MAL-2025-187377

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

MAL-2025-185672

Malicious code in authorize-code-bash-encrypt-abstract (npm)

MAL-2025-187449

Malicious code in index-chi-grep-nu-wind (npm)

MAL-2025-186359

Malicious code in cosmos-coronalmassejection-remark-arcturus (npm)

MAL-2025-186480

Malicious code in darkenergy-helmet-epigenetics-leda (npm)

MAL-2025-185955

Malicious code in byte-decompress-cold-deploy-wind (npm)

MAL-2025-189112

Malicious code in redshift-build-geodynamo-hyperion (npm)

MAL-2025-188181

Malicious code in native-izar-hugo-start (npm)

MAL-2025-187435

Malicious code in import-float-omega-user-eta (npm)

MAL-2025-186018

Malicious code in castor-andromeda-izar-config (npm)

MAL-2025-186824

Malicious code in error-bash-monitor-stack-decode (npm)

MAL-2025-187106

Malicious code in ganymede-nestjs-izar-release-it (npm)

MAL-2025-186603

Malicious code in dog-process-file-file-moon (npm)

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)