Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

inflation-technocracy-css-minimizer-webpack-plugin-await

npm

MAL-2025-187466

Malicious code in inflation-technocracy-css-minimizer-webpack-plugin-await (npm)

Malware
Nov 2025

grunt-ursa-cosmochemistry-xenobiology

npm

MAL-2025-187240

Malicious code in grunt-ursa-cosmochemistry-xenobiology (npm)

Malware
Nov 2025

xo-halley-less-loader-cache

npm

MAL-2025-190404

Malicious code in xo-halley-less-loader-cache (npm)

Malware
Nov 2025

phoenix-cache-dione-package

npm

MAL-2025-188682

Malicious code in phoenix-cache-dione-package (npm)

Malware
Nov 2025

miranda-native-cross-env-oauth

npm

MAL-2025-188080

Malicious code in miranda-native-cross-env-oauth (npm)

Malware
Nov 2025

greatfilter-repository-on-proxima

npm

MAL-2025-187224

Malicious code in greatfilter-repository-on-proxima (npm)

Malware
Nov 2025

gemini-joviology-sedimentology-buffer

npm

MAL-2025-187141

Malicious code in gemini-joviology-sedimentology-buffer (npm)

Malware
Nov 2025

less-less-phenomic-paleoclimatology

npm

MAL-2025-187753

Malicious code in less-less-phenomic-paleoclimatology (npm)

Malware
Nov 2025

mongodb-cz-conventional-changelog-rollup-plugin-biosignature

npm

MAL-2025-188107

Malicious code in mongodb-cz-conventional-changelog-rollup-plugin-biosignature (npm)

Malware
Nov 2025

fusion-gammarayburst-magnetosphere-child-process

npm

MAL-2025-187063

Malicious code in fusion-gammarayburst-magnetosphere-child-process (npm)

Malware
Nov 2025

cryovolcano-transhumanism-scripts-janus

npm

MAL-2025-186401

Malicious code in cryovolcano-transhumanism-scripts-janus (npm)

Malware
Nov 2025

heliophysics-blackhole-ganymede-cluster

npm

MAL-2025-187312

Malicious code in heliophysics-blackhole-ganymede-cluster (npm)

Malware
Nov 2025

mechatronics-xenos-fomalhaut-antimatter

npm

MAL-2025-187964

Malicious code in mechatronics-xenos-fomalhaut-antimatter (npm)

Malware
Nov 2025

promise-selenium-bellatrix-mysql

npm

MAL-2025-188863

Malicious code in promise-selenium-bellatrix-mysql (npm)

Malware
Nov 2025

sedna-request-dysonswarm-enif

npm

MAL-2025-189417

Malicious code in sedna-request-dysonswarm-enif (npm)

Malware
Nov 2025

bad-hash-shell-interpret-compress

npm

MAL-2025-185733

Malicious code in bad-hash-shell-interpret-compress (npm)

Malware
Nov 2025

forever-zephyr-pavo-slides

npm

MAL-2025-187016

Malicious code in forever-zephyr-pavo-slides (npm)

Malware
Nov 2025

websockets-hawkingradiation-redis-barnard

npm

MAL-2025-190295

Malicious code in websockets-hawkingradiation-redis-barnard (npm)

Malware
Nov 2025

node-sass-kastra-bellatrix-express

npm

MAL-2025-188318

Malicious code in node-sass-kastra-bellatrix-express (npm)

Malware
Nov 2025

bulma-yonder-acamar-ichnology

npm

MAL-2025-185938

Malicious code in bulma-yonder-acamar-ichnology (npm)

Malware
Nov 2025

cors-relay-mini-css-extract-plugin-winston

npm

MAL-2025-186318

Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

Malware
Nov 2025

chai-prompts-auth0-geckodriver

npm

MAL-2025-186083

Malicious code in chai-prompts-auth0-geckodriver (npm)

Malware
Nov 2025

enceladus-quantumfoam-markdownlint-lightyear

npm

MAL-2025-186736

Malicious code in enceladus-quantumfoam-markdownlint-lightyear (npm)

Malware
Nov 2025

ursa-auth0-delphinus-nodejs

npm

MAL-2025-190103

Malicious code in ursa-auth0-delphinus-nodejs (npm)

Malware
Nov 2025
Showing 16273 - 16296 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001