Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

perseus-cordelia-google-express

npm

MAL-2025-188621

Malicious code in perseus-cordelia-google-express (npm)

Malware
Nov 2025

sirius-lynx-antares-server

npm

MAL-2025-189516

Malicious code in sirius-lynx-antares-server (npm)

Malware
Nov 2025

ophiuchus-sirius-biomimicry-loop

npm

MAL-2025-188443

Malicious code in ophiuchus-sirius-biomimicry-loop (npm)

Malware
Nov 2025

quasar-helmet-metabolomics-node-config

npm

MAL-2025-189031

Malicious code in quasar-helmet-metabolomics-node-config (npm)

Malware
Nov 2025

asthenosphere-package-eridanus-restart

npm

MAL-2025-185583

Malicious code in asthenosphere-package-eridanus-restart (npm)

Malware
Nov 2025

configstore-hermes-development-update

npm

MAL-2025-186284

Malicious code in configstore-hermes-development-update (npm)

Malware
Nov 2025

graphql-nightmare-css-loader-abiogenesis

npm

MAL-2025-187206

Malicious code in graphql-nightmare-css-loader-abiogenesis (npm)

Malware
Nov 2025

cluster-decompress-double-encode-quick

npm

MAL-2025-186180

Malicious code in cluster-decompress-double-encode-quick (npm)

Malware
Nov 2025

joviology-mocha-cluster-redshift

npm

MAL-2025-187618

Malicious code in joviology-mocha-cluster-redshift (npm)

Malware
Nov 2025

cors-relay-mini-css-extract-plugin-winston

npm

MAL-2025-186318

Malicious code in cors-relay-mini-css-extract-plugin-winston (npm)

Malware
Nov 2025

soap-callback-convict-middleware

npm

MAL-2025-189552

Malicious code in soap-callback-convict-middleware (npm)

Malware
Nov 2025

cluster-sirius-promise-neutrino

npm

MAL-2025-186186

Malicious code in cluster-sirius-promise-neutrino (npm)

Malware
Nov 2025

cz-conventional-changelog-ora-rehype-xanadu

npm

MAL-2025-186455

Malicious code in cz-conventional-changelog-ora-rehype-xanadu (npm)

Malware
Nov 2025

event-biogeochemistry-blitz-eris

npm

MAL-2025-186874

Malicious code in event-biogeochemistry-blitz-eris (npm)

Malware
Nov 2025

centaurus-browserify-run-script-interferometry

npm

MAL-2025-186060

Malicious code in centaurus-browserify-run-script-interferometry (npm)

Malware
Nov 2025

mesosphere-innercore-transport-proteomics

npm

MAL-2025-187989

Malicious code in mesosphere-innercore-transport-proteomics (npm)

Malware
Nov 2025

duplex-lacerta-link-pipe

npm

MAL-2025-186647

Malicious code in duplex-lacerta-link-pipe (npm)

Malware
Nov 2025

mock-xml-omicron-protected-class

npm

MAL-2025-188095

Malicious code in mock-xml-omicron-protected-class (npm)

Malware
Nov 2025

update-meteor-jupiter-kaus

npm

MAL-2025-190078

Malicious code in update-meteor-jupiter-kaus (npm)

Malware
Nov 2025

paleoclimatology-izar-coronalmassejection-webdriver-mocha

npm

MAL-2025-188511

Malicious code in paleoclimatology-izar-coronalmassejection-webdriver-mocha (npm)

Malware
Nov 2025

halley-fusion-parcel-node-sass

npm

MAL-2025-187267

Malicious code in halley-fusion-parcel-node-sass (npm)

Malware
Nov 2025

link-slidev-dione-markdown-pdf

npm

MAL-2025-187796

Malicious code in link-slidev-dione-markdown-pdf (npm)

Malware
Nov 2025

algol-apollo-dotenv-parse-variables-browserify

npm

MAL-2025-185427

Malicious code in algol-apollo-dotenv-parse-variables-browserify (npm)

Malware
Nov 2025

serialize-bash-authenticate-execute-cloud

npm

MAL-2025-189449

Malicious code in serialize-bash-authenticate-execute-cloud (npm)

Malware
Nov 2025
Showing 16441 - 16464 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001