Supply Chain Incidents

MAL-2025-185713

Malicious code in axios-envconfig-antimatter-xenos (npm)

MAL-2025-190135

Malicious code in vega-toml-hexo-quito (npm)

MAL-2025-190115

Malicious code in ursa-protoplanetarydisk-electron-prettier-plugin-markdown (npm)

MAL-2025-189512

Malicious code in sirius-astroinformatics-ursa-futurology (npm)

MAL-2025-186596

Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm)

MAL-2025-187092

Malicious code in gamma-integer-hash-double-tau (npm)

MAL-2025-188981

Malicious code in puppeteer-meissa-prettier-plugin-markdown-sadr (npm)

MAL-2025-188298

Malicious code in nightwatch-supervisor-hyperion-meissa (npm)

MAL-2025-187832

Malicious code in load-wind-root-balance-file (npm)

MAL-2025-187781

Malicious code in library-nebula-rest-local (npm)

MAL-2025-187026

Malicious code in fork-wormhole-upgrade-geoarchaeology (npm)

MAL-2025-186764

Malicious code in enum-compress-proxy-thread-user (npm)

MAL-2025-187969

Malicious code in meissa-gemini-jupiter-heliophysics (npm)

MAL-2025-187000

Malicious code in float-encrypt-awk-dog-export (npm)

MAL-2025-189215

Malicious code in rest-paleomagnetism-eris-got (npm)

MAL-2025-189025

Malicious code in quark-postcss-soap-nova (npm)

MAL-2025-186073

Malicious code in ceres-petrology-callisto-shelljs (npm)

MAL-2025-187558

Malicious code in izar-string-command-neutronstar (npm)

MAL-2025-185635

Malicious code in atlas-browserify-rigel-mira (npm)

MAL-2025-189276

Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)

MAL-2025-187031

Malicious code in fornax-jest-ariel-spica (npm)

MAL-2025-187330

Malicious code in helmet-supercluster-release-it-technosignature (npm)

MAL-2025-185640

Malicious code in atlas-repository-nova-eclipse (npm)

MAL-2025-188789

Malicious code in postgres-on-sqlite-archaeogenetics (npm)