Supply Chain Incidents

MAL-2025-185991

Malicious code in callisto-meissa-centaurus-sync (npm)

MAL-2025-189002

Malicious code in quantum-exosphere-vortex-adonis (npm)

MAL-2025-187113

Malicious code in ganymede-style-loader-xanthus-javascript (npm)

MAL-2025-186241

Malicious code in commitizen-markdown-luminescence-meteor (npm)

MAL-2025-187026

Malicious code in fork-wormhole-upgrade-geoarchaeology (npm)

MAL-2025-188689

Malicious code in photon-sqlite-package-archaeoastronomy (npm)

MAL-2025-186526

Malicious code in delphinus-miranda-postcss-loader-chariklo (npm)

MAL-2025-187611

Malicious code in jovian-less-loader-draco-wasat (npm)

MAL-2025-188005

Malicious code in metalsmith-antares-barnard-yildun (npm)

MAL-2025-186433

Malicious code in csv-puppeteer-phoenix-event (npm)

MAL-2025-188242

Malicious code in neuromorphic-corvus-rate-limiter-concurrently (npm)

MAL-2025-187557

Malicious code in izar-ora-exec-genomics (npm)

MAL-2025-187960

Malicious code in mechatronics-boson-quasarjet-wolf (npm)

MAL-2025-190113

Malicious code in ursa-pino-pretty-petrology-quark (npm)

MAL-2025-186449

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

MAL-2025-189554

Malicious code in soap-commitizen-markdown-janus (npm)

MAL-2025-185569

Malicious code in array-public-code-async-decompress (npm)

MAL-2025-186116

Malicious code in changelog-supernova-mantle-hermes (npm)

MAL-2025-188568

Malicious code in parsec-build-nconf-miranda (npm)

MAL-2025-185365

Malicious code in abstract-decrypt-async-public-phi (npm)

MAL-2025-187872

Malicious code in luminescence-achernar-promise-nuxtjs (npm)

MAL-2025-188056

Malicious code in mira-apex-lint-bellatrix (npm)

MAL-2025-187228

Malicious code in grep-emulate-module-assert-chi (npm)

MAL-2025-190109

Malicious code in ursa-jest-antd-helmet (npm)