Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

221,967
Total Incidents

redux-router-kit

npm

MAL-2025-190780

Malicious code in redux-router-kit (npm)

Malware
Nov 2025

@ensdomains/ens-avatar

npm

MAL-2025-190730

Malicious code in @ensdomains/ens-avatar (npm)

Malware
Nov 2025

token.js-fork

npm

MAL-2025-190785

Malicious code in token.js-fork (npm)

Malware
Nov 2025

@actbase/react-daum-postcode

npm

MAL-2025-190708

Malicious code in @actbase/react-daum-postcode (npm)

Malware
Nov 2025

@asyncapi/nodejs-ws-template

npm

MAL-2025-190719

Malicious code in @asyncapi/nodejs-ws-template (npm)

Malware
Nov 2025

@posthog/agent

npm

MAL-2025-190748

Malicious code in @posthog/agent (npm)

Malware
Nov 2025

@posthog/plugin-contrib

npm

MAL-2025-190751

Malicious code in @posthog/plugin-contrib (npm)

Malware
Nov 2025

test-hardhat-app

npm

MAL-2025-190784

Malicious code in test-hardhat-app (npm)

Malware
Nov 2025

zuper-cli

npm

MAL-2025-190789

Malicious code in zuper-cli (npm)

Malware
Nov 2025

@ensdomains/ens-validation

npm

MAL-2025-190731

Malicious code in @ensdomains/ens-validation (npm)

Malware
Nov 2025

skills-use

npm

MAL-2025-190783

Malicious code in skills-use (npm)

Malware
Nov 2025

@posthog/piscina

npm

MAL-2025-190750

Malicious code in @posthog/piscina (npm)

Malware
Nov 2025

typeorm-orbit

npm

MAL-2025-190786

Malicious code in typeorm-orbit (npm)

Malware
Nov 2025

orbit-nebula-editor

npm

MAL-2025-190777

Malicious code in orbit-nebula-editor (npm)

Malware
Nov 2025

@trigo/atrix-elasticsearch

npm

MAL-2025-190759

Malicious code in @trigo/atrix-elasticsearch (npm)

Malware
Nov 2025

@posthog/siphash

npm

MAL-2025-190753

Malicious code in @posthog/siphash (npm)

Malware
Nov 2025

@posthog/rrweb-record

npm

MAL-2025-190752

Malicious code in @posthog/rrweb-record (npm)

Malware
Nov 2025

@trigo/atrix-soap

npm

MAL-2025-190760

Malicious code in @trigo/atrix-soap (npm)

Malware
Nov 2025

eslint-config-zeallat-base

npm

MAL-2025-190772

Malicious code in eslint-config-zeallat-base (npm)

Malware
Nov 2025

@asyncapi/java-spring-template

npm

MAL-2025-190716

Malicious code in @asyncapi/java-spring-template (npm)

Malware
Nov 2025

iron-shield-miniapp

npm

MAL-2025-190773

Malicious code in iron-shield-miniapp (npm)

Malware
Nov 2025

create-glee-app

npm

MAL-2025-190767

Malicious code in create-glee-app (npm)

Malware
Nov 2025

@seung-ju/next

npm

MAL-2025-190755

Malicious code in @seung-ju/next (npm)

Malware
Nov 2025

@actbase/react-native-tiktok

npm

MAL-2025-190712

Malicious code in @actbase/react-native-tiktok (npm)

Malware
Nov 2025
Showing 13873 - 13896 of 221,967
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001