Supply Chain Incidents

MAL-2025-187379

Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)

MAL-2025-187132

Malicious code in geckodriver-slidev-protractor-hermes (npm)

MAL-2025-186262

Malicious code in compress-async-rho-boolean-assert (npm)

MAL-2025-188550

Malicious code in panspermia-winston-phoebe-adonis (npm)

MAL-2025-186794

Malicious code in equinox-blueshift-exosphere-tectonic (npm)

MAL-2025-187072

Malicious code in futurology-arcturus-saturnology-leda (npm)

MAL-2025-189738

Malicious code in superagent-loglevel-stop-rest (npm)

MAL-2025-189998

Malicious code in triton-nconf-sublimation-grus (npm)

MAL-2025-186316

Malicious code in cors-centaurus-electron-builder-galaxy (npm)

MAL-2025-190311

Malicious code in wezen-halley-less-io (npm)

MAL-2025-189513

Malicious code in sirius-blaze-decoherence-scripts (npm)

MAL-2025-186372

Malicious code in cressida-yakutsk-zephyr-rollup (npm)

MAL-2025-186903

Malicious code in exoplanet-genomics-thermosphere-phoebe (npm)

MAL-2025-189939

Malicious code in titan-iota-carina-vuepress (npm)

MAL-2025-190020

Malicious code in typeorm-warp-procyon-non-blocking (npm)

MAL-2025-189467

Malicious code in server-weywot-ablation-ablation (npm)

MAL-2025-190156

Malicious code in virgo-build-equinox-init (npm)

MAL-2025-187698

Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

MAL-2025-185724

Malicious code in babel-singularity-got-hadron (npm)

MAL-2025-188077

Malicious code in miranda-lithosphere-xo-alphard (npm)

MAL-2025-188958

Malicious code in publish-superagent-rollup-plugin-commitlint (npm)

MAL-2025-187149

Malicious code in genomics-run-script-auth-neptune (npm)

MAL-2025-185366

Malicious code in abstract-hash-key-report-load (npm)

MAL-2025-187390

Malicious code in husky-build-toml-troposphere (npm)