Supply Chain Incidents

MAL-2025-185662

Malicious code in auth0-andromeda-heka-cross-env (npm)

MAL-2025-190134

Malicious code in vega-panspermia-jwt-gemini (npm)

MAL-2025-188031

Malicious code in meteor-paleoecology-mysql-middleware (npm)

MAL-2025-188134

Malicious code in mu-slow-star-promise-eta (npm)

MAL-2025-188248

Malicious code in neutronstar-bootstrap-nodejs-paleomagnetism (npm)

MAL-2025-186499

Malicious code in decode-authenticate-final-delta-enum (npm)

MAL-2025-189585

Malicious code in solarnebula-nextjs-start-request (npm)

MAL-2025-189453

Malicious code in serialize-minify-decompress-mu-cron (npm)

MAL-2025-186195

Malicious code in code-report-cold-iota-root (npm)

MAL-2025-188263

Malicious code in nextjs-google-transport-markdownlint (npm)

MAL-2025-186958

Malicious code in fetch-charon-callisto-meissa (npm)

MAL-2025-185974

Malicious code in callback-elara-hadron-jekyll (npm)

MAL-2025-187018

Malicious code in fork-eslint-slidev-chakra-ui (npm)

MAL-2025-190456

Malicious code in zenobia-sirius-paleoclimatology-enceladus (npm)

MAL-2025-187134

Malicious code in gemini-csv-gacrux-andromeda (npm)

MAL-2025-188536

Malicious code in paleontology-saturnology-standard-pipe (npm)

MAL-2025-186086

Malicious code in chakra-ui-ethology-biomimicry-superflare (npm)

MAL-2025-189606

Malicious code in spectron-csv-dynamo-bunyan (npm)

MAL-2025-190346

Malicious code in writable-jovian-pino-markdownlint (npm)

MAL-2025-188035

Malicious code in middleware-antares-bootstrap-fork (npm)

MAL-2025-187059

Malicious code in fusion-ablation-cygnus-parsec (npm)

MAL-2025-190374

Malicious code in xenon-proxima-whitedwarf-jsonp (npm)

MAL-2025-187841

Malicious code in local-terser-postcss-loader-eventhoriz (npm)

MAL-2025-188051

Malicious code in mini-css-extract-plugin-sass-loader-rigel-koa (npm)