Supply Chain Incidents

MAL-2025-186526

Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)

MAL-2025-187008

Malicious code in fomalhaut-venus-pavo-update (npm)

MAL-2025-188056

Malicious code in mira-apex-lint-bellatrix (npm)

MAL-2025-186714

Malicious code in element-ui-jabbah-chalk-enceladus (npm)

MAL-2025-187379

Malicious code in html-webpack-plugin-version-vulcan-rollup (npm)

MAL-2025-189738

Malicious code in superagent-loglevel-stop-rest (npm)

MAL-2025-188550

Malicious code in panspermia-winston-phoebe-adonis (npm)

MAL-2025-188958

Malicious code in publish-superagent-rollup-plugin-commitlint (npm)

MAL-2025-187149

Malicious code in genomics-run-script-auth-neptune (npm)

MAL-2025-186794

Malicious code in equinox-blueshift-exosphere-tectonic (npm)

MAL-2025-187072

Malicious code in futurology-arcturus-saturnology-leda (npm)

MAL-2025-190311

Malicious code in wezen-halley-less-io (npm)

MAL-2025-189998

Malicious code in triton-nconf-sublimation-grus (npm)

MAL-2025-185770

Malicious code in bellatrix-odin-redis-commitlint (npm)

MAL-2025-185365

Malicious code in abstract-decrypt-async-public-phi (npm)

MAL-2025-187644

Malicious code in jwt-antares-chakra-ui-andromeda (npm)

MAL-2025-189513

Malicious code in sirius-blaze-decoherence-scripts (npm)

MAL-2025-189467

Malicious code in server-weywot-ablation-ablation (npm)

MAL-2025-187698

Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

MAL-2025-188008

Malicious code in metalsmith-json-husky-dotenv-safe (npm)

MAL-2025-188825

Malicious code in private-dorado-grunt-jupiter (npm)

MAL-2025-186999

Malicious code in float-beta-deploy-star-meta (npm)

MAL-2025-185724

Malicious code in babel-singularity-got-hadron (npm)

MAL-2025-188973

Malicious code in pulsar-orogeny-heliophysics-morgan (npm)