Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

221,817
Total Incidents

transform-spread

npm

MAL-0000-phantomraven-transform-spread

Malicious npm package: transform-spread (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-es2015-shorthand-properties

npm

MAL-0000-phantomraven-transform-es2015-shorthand-properties

Malicious npm package: transform-es2015-shorthand-properties (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-jsbi-to-bigint

npm

MAL-0000-phantomraven-transform-jsbi-to-bigint

Malicious npm package: transform-jsbi-to-bigint (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-member-expression-literals

npm

MAL-0000-phantomraven-transform-member-expression-literals

Malicious npm package: transform-member-expression-literals (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

typescript-resolvers

npm

MAL-0000-phantomraven-typescript-resolvers

Malicious npm package: typescript-resolvers (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

syntax-exponentiation-operator

npm

MAL-0000-phantomraven-syntax-exponentiation-operator

Malicious npm package: syntax-exponentiation-operator (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

vue-scoped-css

npm

MAL-0000-phantomraven-vue-scoped-css

Malicious npm package: vue-scoped-css (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

undeclared-variables-check

npm

MAL-0000-phantomraven-undeclared-variables-check

Malicious npm package: undeclared-variables-check (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

ignore-html-and-css-imports

npm

MAL-0000-phantomraven-ignore-html-and-css-imports

Malicious npm package: ignore-html-and-css-imports (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-simplify-comparison-operators

npm

MAL-0000-phantomraven-transform-simplify-comparison-operators

Malicious npm package: transform-simplify-comparison-operators (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-modules-systemjs

npm

MAL-0000-phantomraven-transform-modules-systemjs

Malicious npm package: transform-modules-systemjs (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-react-jsx

npm

MAL-0000-phantomraven-transform-react-jsx

Malicious npm package: transform-react-jsx (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

syntax-async-generators

npm

MAL-0000-phantomraven-syntax-async-generators

Malicious npm package: syntax-async-generators (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

dazaar-payment

npm

MAL-0000-phantomraven-dazaar-payment

Malicious npm package: dazaar-payment (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-remove-debugger

npm

MAL-0000-phantomraven-transform-remove-debugger

Malicious npm package: transform-remove-debugger (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

developit

npm

MAL-0000-phantomraven-developit

Malicious npm package: developit (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

todo-plz

npm

MAL-0000-phantomraven-todo-plz

Malicious npm package: todo-plz (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

minify-mangle-names

npm

MAL-0000-phantomraven-minify-mangle-names

Malicious npm package: minify-mangle-names (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

dazaar-cli

npm

MAL-0000-phantomraven-dazaar-cli

Malicious npm package: dazaar-cli (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

typescript-validation-schema

npm

MAL-0000-phantomraven-typescript-validation-schema

Malicious npm package: typescript-validation-schema (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

lit-a11y

npm

MAL-0000-phantomraven-lit-a11y

Malicious npm package: lit-a11y (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

typescript-type-graphql

npm

MAL-0000-phantomraven-typescript-type-graphql

Malicious npm package: typescript-type-graphql (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

syntax-export-extensions

npm

MAL-0000-phantomraven-syntax-export-extensions

Malicious npm package: syntax-export-extensions (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

sort-export-all

npm

MAL-0000-phantomraven-sort-export-all

Malicious npm package: sort-export-all (PhantomRaven campaign, Wave 4)

Malware
Mar 2026
Showing 10753 - 10776 of 221,817
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001