Supply Chain Incidents

MAL-2025-187234

Malicious code in gridsome-enceladus-aldebaran-auth0 (npm)

MAL-2025-189599

Malicious code in spawn-rigel-petrology-ganymede (npm)

MAL-2025-185802

Malicious code in big-grid-cron-parse-fork (npm)

MAL-2025-187521

Malicious code in io-gulp-apollo-javascript (npm)

MAL-2025-188973

Malicious code in pulsar-orogeny-heliophysics-morgan (npm)

MAL-2025-185583

Malicious code in asthenosphere-package-eridanus-restart (npm)

MAL-2025-185898

Malicious code in borealis-rigel-string-exoplanetology (npm)

MAL-2025-188825

Malicious code in private-dorado-grunt-jupiter (npm)

MAL-2025-186334

Malicious code in cosmicray-draco-interferometry-heka (npm)

MAL-2025-185872

Malicious code in book-earth-runtime-delta-chi (npm)

MAL-2025-189424

Malicious code in seismology-fornax-frontend-neutronstar (npm)

MAL-2025-189962

Malicious code in transform-carpo-charon-hapi (npm)

MAL-2025-188622

Malicious code in perseus-cosmogenic-spectron-webdriver-meissa (npm)

MAL-2025-190253

Malicious code in web-compile-deploy-load-secure (npm)

MAL-2025-186175

Malicious code in cloud-user-static-promise-stub (npm)

MAL-2025-185940

Malicious code in bundle-static-pipe-mu-float (npm)

MAL-2025-186756

Malicious code in entanglement-australis-event-leda (npm)

MAL-2025-188666

Malicious code in phi-void-long-reject-import (npm)

MAL-2025-187132

Malicious code in geckodriver-slidev-protractor-hermes (npm)

MAL-2025-188889

Malicious code in proteomics-electron-triton-child-process (npm)

MAL-2025-187029

Malicious code in fornax-chariklo-sass-loader-parsec (npm)

MAL-2025-189659

Malicious code in start-iota-webpack-cli (npm)

MAL-2025-186080

Malicious code in chai-juno-eleventy-hydrogeology (npm)

MAL-2025-188457

Malicious code in optimize-report-pi-module-hash (npm)