Supply Chain Incidents

MAL-2025-186007

Malicious code in carpo-lynx-sirius-sirius (npm)

MAL-2025-186836

Malicious code in eslint-config-nebula-magnetosphere-vuetify (npm)

MAL-2025-189324

Malicious code in sagitta-tachyon-rocket-nodemon (npm)

MAL-2025-189802

Malicious code in tailwindcss-bulma-vuetify-zenobia (npm)

MAL-2025-187889

Malicious code in lyra-cryovolcano-mongoose-multiverse (npm)

MAL-2025-186227

Malicious code in command-axios-asteroid-carina (npm)

MAL-2025-187378

Malicious code in html-webpack-plugin-vega-atlas-fetch (npm)

MAL-2025-188047

Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

MAL-2025-189309

Malicious code in sadr-technocracy-superagent-terser-webpack-plugin (npm)

MAL-2025-189244

Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)

MAL-2025-188060

Malicious code in mira-pegasus-helios-command (npm)

MAL-2025-189694

Malicious code in string-crust-exoplanet-centauri (npm)

MAL-2025-190136

Malicious code in vega-xerxes-meissa-chalk (npm)

MAL-2025-187992

Malicious code in mesosphere-nanotechnology-got-scorpius (npm)

MAL-2025-186958

Malicious code in fetch-charon-callisto-meissa (npm)

MAL-2025-190393

Malicious code in xi-moon-star-fire-await (npm)

MAL-2025-187626

Malicious code in json-miranda-karma-auth0 (npm)

MAL-2025-185613

Malicious code in async-command-farout-hexo (npm)

MAL-2025-188643

Malicious code in perturbation-stratigraphy-eslint-plugin-fusion (npm)

MAL-2025-187326

Malicious code in helmet-radiant-babel-dorado (npm)

MAL-2025-190456

Malicious code in zenobia-sirius-paleoclimatology-enceladus (npm)

MAL-2025-187415

Malicious code in hyperion-postgres-eslint-config-warp (npm)

MAL-2025-186967

Malicious code in figures-materialize-markdown-pdf-miranda (npm)

MAL-2025-189480

Malicious code in short-encrypt-root-visualize-visualize (npm)