Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

221,723
Total Incidents

internal-auth-provider

npm

MAL-2026-3261

Malicious code in internal-auth-provider (npm)

Typosquat
Apr 2026

@omni-corp-infra/sso-bridge-core

npm

MAL-2026-3257

Malicious code in @omni-corp-infra/sso-bridge-core (npm)

Typosquat
Apr 2026

@internal-infra/core-sso-bridge

npm

MAL-2026-3256

Malicious code in @internal-infra/core-sso-bridge (npm)

Typosquat
Apr 2026

@tech-global/internal-gateway-core

npm

MAL-2026-3258

Malicious code in @tech-global/internal-gateway-core (npm)

Typosquat
Apr 2026

@enterprise-core/auth-gateway-bridge

npm

MAL-2026-3255

Malicious code in @enterprise-core/auth-gateway-bridge (npm)

Typosquat
Apr 2026

enterprise-auth-gateway-core

npm

MAL-2026-3259

Malicious code in enterprise-auth-gateway-core (npm)

Typosquat
Apr 2026

react-native-parallax-scroll-view-updated

npm

MAL-2026-3262

Malicious code in react-native-parallax-scroll-view-updated (npm)

Typosquat
Apr 2026

google-storage-cloud

npm

MAL-2026-3260

Malicious code in google-storage-cloud (npm)

Typosquat
Apr 2026

chai-as-char

npm

MAL-2026-3164

Malicious code in chai-as-char (npm)

Malware
Apr 2026

chai-as-redeployed

npm

MAL-2026-3165

Malicious code in chai-as-redeployed (npm)

Malware
Apr 2026

period-newline

npm

MAL-2026-3181

Malicious code in period-newline (npm)

Malware
Apr 2026

nicegui

npm

MAL-2026-3180

Malicious code in nicegui (npm)

Typosquat
Apr 2026

redeem-onchain-sdk

npm

MAL-2026-3182

Malicious code in redeem-onchain-sdk (npm)

Malware
Apr 2026

mbt

npm

MAL-2026-3179

Malicious code in mbt (npm)

Malware
Apr 2026

@cap-js/db-service

npm

MAL-2026-3176

Malicious code in @cap-js/db-service (npm)

Malware
Apr 2026

@cap-js/postgres

npm

MAL-2026-3177

Malicious code in @cap-js/postgres (npm)

Malware
Apr 2026

@cap-js/sqlite

npm

MAL-2026-3178

Malicious code in @cap-js/sqlite (npm)

Malware
Apr 2026

apple-infra-ultimate-bypass

npm

MAL-2026-3156

Malicious code in apple-infra-ultimate-bypass (npm)

Typosquat
Apr 2026

apple-infra-network-v2

npm

MAL-2026-3155

Malicious code in apple-infra-network-v2 (npm)

Typosquat
Apr 2026

agents-a365-runtime

npm

MAL-2026-3149

Malicious code in agents-a365-runtime (npm)

Typosquat
Apr 2026

apple-coredata-internal-service

npm

MAL-2026-3152

Malicious code in apple-coredata-internal-service (npm)

Typosquat
Apr 2026

apple-infra-gcp-leak

npm

MAL-2026-3154

Malicious code in apple-infra-gcp-leak (npm)

Typosquat
Apr 2026

apple-cktool-api-v2

npm

MAL-2026-3150

Malicious code in apple-cktool-api-v2 (npm)

Typosquat
Apr 2026

apple-cloud-infrastructure-monitor

npm

MAL-2026-3151

Malicious code in apple-cloud-infrastructure-monitor (npm)

Typosquat
Apr 2026
Showing 9265 - 9288 of 221,723
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001