Supply Chain Incidents

MAL-2025-187565

Malicious code in janus-aldebaran-middleware-paleontology (npm)

MAL-2025-187326

Malicious code in helmet-radiant-babel-dorado (npm)

MAL-2025-188506

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

MAL-2025-186036

Malicious code in catch-bash-string-long-catch (npm)

MAL-2025-189621

Malicious code in speleology-pipe-pino-puppeteer (npm)

MAL-2025-189561

Malicious code in soap-winston-thuban-pyxis (npm)

MAL-2025-189324

Malicious code in sagitta-tachyon-rocket-nodemon (npm)

MAL-2025-187693

Malicious code in kinetic-ora-bootstrap-redshift (npm)

MAL-2025-186411

Malicious code in csrf-mutation-oauth-convict (npm)

MAL-2025-185629

Malicious code in async-readable-solis-leda (npm)

MAL-2025-186227

Malicious code in command-axios-asteroid-carina (npm)

MAL-2025-190024

Malicious code in uglify-js-gatsby-mocha-titan (npm)

MAL-2025-187078

Malicious code in futurology-taurus-celeste-css-loader (npm)

MAL-2025-187940

Malicious code in materialize-cache-neptune-cosmogenic (npm)

MAL-2025-186744

Malicious code in encrypt-link-alert-grep-moon (npm)

MAL-2025-187787

Malicious code in link-astrometry-gulp-transhumanism (npm)

MAL-2025-187134

Malicious code in gemini-csv-gacrux-andromeda (npm)

MAL-2025-189564

Malicious code in sociobiology-radiometric-relay-geochemistry (npm)

MAL-2025-185612

Malicious code in async-cluster-await-io (npm)

MAL-2025-186898

Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm)

MAL-2025-186304

Malicious code in cordelia-babel-on-proxima (npm)

MAL-2025-190290

Malicious code in webpack-less-heliophysics-wavefunction (npm)

MAL-2025-187160

Malicious code in geodynamo-biosignature-crust-mongodb (npm)

MAL-2025-185836

Malicious code in biotechnology-apollo-rollup-plugin-nodemon (npm)