Supply Chain Incidents

MAL-2025-189002

Malicious code in quantum-exosphere-vortex-adonis (npm)

MAL-2025-187113

Malicious code in ganymede-style-loader-xanthus-javascript (npm)

MAL-2025-188689

Malicious code in photon-sqlite-package-archaeoastronomy (npm)

MAL-2025-186449

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

MAL-2025-185365

Malicious code in abstract-decrypt-async-public-phi (npm)

MAL-2025-190113

Malicious code in ursa-pino-pretty-petrology-quark (npm)

MAL-2025-188533

Malicious code in paleontology-luminescence-less-hermes (npm)

MAL-2025-186116

Malicious code in changelog-supernova-mantle-hermes (npm)

MAL-2025-187960

Malicious code in mechatronics-boson-quasarjet-wolf (npm)

MAL-2025-190189

Malicious code in vuepress-auth0-meteor-duplex (npm)

MAL-2025-188468

Malicious code in orbit-publish-dynamo-helmet (npm)

MAL-2025-188910

Malicious code in proxima-dagda-tethys-vuepress (npm)

MAL-2025-187826

Malicious code in lithosphere-quark-mesosphere-cache (npm)

MAL-2025-188627

Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

MAL-2025-188056

Malicious code in mira-apex-lint-bellatrix (npm)

MAL-2025-188568

Malicious code in parsec-build-nconf-miranda (npm)

MAL-2025-190183

Malicious code in void-uglify-warn-export-zero (npm)

MAL-2025-188823

Malicious code in private-centauri-miranda-areology (npm)

MAL-2025-189569

Malicious code in socket-link-resolve-try-encrypt (npm)

MAL-2025-190002

Malicious code in triton-subduction-darkenergy-boson (npm)

MAL-2025-187530

Malicious code in ionosphere-webdriverio-module-primatology (npm)

MAL-2025-185607

Malicious code in astrophysics-extremophile-library-bulma (npm)

MAL-2025-188385

Malicious code in object-rain-fast-process-unix (npm)

MAL-2025-189788

Malicious code in sync-vega-apex-prettier-plugin-markdown (npm)