Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

heka-markdownlint-rollup-node-config

npm

MAL-2025-187305

Malicious code in heka-markdownlint-rollup-node-config (npm)

Malware
Nov 2025

eigenstate-outercore-procyon-colors

npm

MAL-2025-186689

Malicious code in eigenstate-outercore-procyon-colors (npm)

Malware
Nov 2025

spectron-webdriver-async-primatology-canopus

npm

MAL-2025-189614

Malicious code in spectron-webdriver-async-primatology-canopus (npm)

Malware
Nov 2025

gamma-good-socket-enum-route

npm

MAL-2025-187091

Malicious code in gamma-good-socket-enum-route (npm)

Malware
Nov 2025

arcturus-magellan-bellatrix-quasarjet

npm

MAL-2025-185545

Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

Malware
Nov 2025

parsec-build-nconf-miranda

npm

MAL-2025-188568

Malicious code in parsec-build-nconf-miranda (npm)

Malware
Nov 2025

cz-conventional-changelog-ora-rehype-xanadu

npm

MAL-2025-186455

Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm)

Malware
Nov 2025

triton-subduction-darkenergy-boson

npm

MAL-2025-190002

Malicious code in triton-subduction-darkenergy-boson (npm)

Malware
Nov 2025

chai-prompts-auth0-geckodriver

npm

MAL-2025-186083

Malicious code in chai-prompts-auth0-geckodriver (npm)

Malware
Nov 2025

biogeochemistry-test-express-css-minimizer-webpack-plugin

npm

MAL-2025-185810

Malicious code in biogeochemistry-test-express-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

development-cypress-nebula-spectron

npm

MAL-2025-186574

Malicious code in development-cypress-nebula-spectron (npm)

Malware
Nov 2025

promise-selenium-bellatrix-mysql

npm

MAL-2025-188863

Malicious code in promise-selenium-bellatrix-mysql (npm)

Malware
Nov 2025

sirius-lynx-antares-server

npm

MAL-2025-189516

Malicious code in sirius-lynx-antares-server (npm)

Malware
Nov 2025

resolvers-query-comet-radiant

npm

MAL-2025-189201

Malicious code in resolvers-query-comet-radiant (npm)

Malware
Nov 2025

perseus-cordelia-google-express

npm

MAL-2025-188621

Malicious code in perseus-cordelia-google-express (npm)

Malware
Nov 2025

ophiuchus-sirius-biomimicry-loop

npm

MAL-2025-188443

Malicious code in ophiuchus-sirius-biomimicry-loop (npm)

Malware
Nov 2025

halley-fusion-parcel-node-sass

npm

MAL-2025-187267

Malicious code in halley-fusion-parcel-node-sass (npm)

Malware
Nov 2025

cluster-decompress-double-encode-quick

npm

MAL-2025-186180

Malicious code in cluster-decompress-double-encode-quick (npm)

Malware
Nov 2025

quasar-helmet-metabolomics-node-config

npm

MAL-2025-189031

Malicious code in quasar-helmet-metabolomics-node-config (npm)

Malware
Nov 2025

asthenosphere-package-eridanus-restart

npm

MAL-2025-185583

Malicious code in asthenosphere-package-eridanus-restart (npm)

Malware
Nov 2025

graphql-nightmare-css-loader-abiogenesis

npm

MAL-2025-187206

Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

Malware
Nov 2025

nebula-dactyl-avior-thermosphere

npm

MAL-2025-188199

Malicious code in nebula-dactyl-avior-thermosphere (npm)

Malware
Nov 2025

configstore-hermes-development-update

npm

MAL-2025-186284

Malicious code in configstore-hermes-development-update (npm)

Malware
Nov 2025

joviology-mocha-cluster-redshift

npm

MAL-2025-187618

Malicious code in joviology-mocha-cluster-redshift (npm)

Malware
Nov 2025
Showing 16417 - 16440 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001