Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

proxima-cli-galaxy-eslint

npm

MAL-2025-188909

Malicious code in proxima-cli-galaxy-eslint (npm)

Malware
Nov 2025

bootstrap-semantic-release-pulsar-koa

npm

MAL-2025-185892

Malicious code in bootstrap-semantic-release-pulsar-koa (npm)

Malware
Nov 2025

gulp-rollup-plugin-carina-csv

npm

MAL-2025-187256

Malicious code in gulp-rollup-plugin-carina-csv (npm)

Malware
Nov 2025

cosmicweb-sedimentology-ignite-library

npm

MAL-2025-186344

Malicious code in cosmicweb-sedimentology-ignite-library (npm)

Malware
Nov 2025

html-webpack-plugin-deimos-toml-command

npm

MAL-2025-187373

Malicious code in html-webpack-plugin-deimos-toml-command (npm)

Malware
Nov 2025

stack-theta-meta-index-web

npm

MAL-2025-189641

Malicious code in stack-theta-meta-index-web (npm)

Malware
Nov 2025

chi-route-good-integer-grep

npm

MAL-2025-186139

Malicious code in chi-route-good-integer-grep (npm)

Malware
Nov 2025

minify-permission-xi-route-export

npm

MAL-2025-188054

Malicious code in minify-permission-xi-route-export (npm)

Malware
Nov 2025

barnard-perseus-comet-chromedriver

npm

MAL-2025-185749

Malicious code in barnard-perseus-comet-chromedriver (npm)

Malware
Nov 2025

css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint

npm

MAL-2025-186423

Malicious code in css-minimizer-webpack-plugin-phoebe-biogeochemistry-lint (npm)

Malware
Nov 2025

geoarchaeology-superagent-entanglement-semantic-ui

npm

MAL-2025-187157

Malicious code in geoarchaeology-superagent-entanglement-semantic-ui (npm)

Malware
Nov 2025

paleomagnetism-neptune-jsonp-postgres

npm

MAL-2025-188527

Malicious code in paleomagnetism-neptune-jsonp-postgres (npm)

Malware
Nov 2025

java-simple-void-fork-sudo

npm

MAL-2025-187593

Malicious code in java-simple-void-fork-sudo (npm)

Malware
Nov 2025

try-signal-lambda-execute-kernel

npm

MAL-2025-190012

Malicious code in try-signal-lambda-execute-kernel (npm)

Malware
Nov 2025

mui-neutrino-nestjs-stratigraphy

npm

MAL-2025-188141

Malicious code in mui-neutrino-nestjs-stratigraphy (npm)

Malware
Nov 2025

try-data-signal-cloud-report

npm

MAL-2025-190009

Malicious code in try-data-signal-cloud-report (npm)

Malware
Nov 2025

slidev-supernova-pavo-zephyr

npm

MAL-2025-189541

Malicious code in slidev-supernova-pavo-zephyr (npm)

Malware
Nov 2025

europa-fork-andromeda-kinetic

npm

MAL-2025-186868

Malicious code in europa-fork-andromeda-kinetic (npm)

Malware
Nov 2025

heliophysics-blackhole-ganymede-cluster

npm

MAL-2025-187312

Malicious code in heliophysics-blackhole-ganymede-cluster (npm)

Malware
Nov 2025

star-private-minify-bad-compress

npm

MAL-2025-189655

Malicious code in star-private-minify-bad-compress (npm)

Malware
Nov 2025

hot-awk-authorize-float-interface

npm

MAL-2025-187369

Malicious code in hot-awk-authorize-float-interface (npm)

Malware
Nov 2025

lint-staged-reveal-md-electron-convict

npm

MAL-2025-187816

Malicious code in lint-staged-reveal-md-electron-convict (npm)

Malware
Nov 2025

warp-dotenv-safe-andromeda-uglify-js

npm

MAL-2025-190220

Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm)

Malware
Nov 2025

permission-resolve-function-fast-try

npm

MAL-2025-188615

Malicious code in permission-resolve-function-fast-try (npm)

Malware
Nov 2025
Showing 16153 - 16176 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001