Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

postcss-loader-ganymede-metalsmith-farout

npm

MAL-2025-188779

Malicious code in postcss-loader-ganymede-metalsmith-farout (npm)

Malware
Nov 2025

quantum-norma-canopus-dotenv-parse-variables

npm

MAL-2025-189004

Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

Malware
Nov 2025

module-user-signal-pi-monitor

npm

MAL-2025-188104

Malicious code in module-user-signal-pi-monitor (npm)

Malware
Nov 2025

user-refactor-cluster-transpile-eta

npm

MAL-2025-190126

Malicious code in user-refactor-cluster-transpile-eta (npm)

Malware
Nov 2025

nightwatch-levels-lepton-phoebe

npm

MAL-2025-188288

Malicious code in nightwatch-levels-lepton-phoebe (npm)

Malware
Nov 2025

alphard-dynamo-antares-meteor

npm

MAL-2025-185438

Malicious code in alphard-dynamo-antares-meteor (npm)

Malware
Nov 2025

greatfilter-lithosphere-isostasy-rocket

npm

MAL-2025-187221

Malicious code in greatfilter-lithosphere-isostasy-rocket (npm)

Malware
Nov 2025

tree-notify-report-decrypt-scale

npm

MAL-2025-189994

Malicious code in tree-notify-report-decrypt-scale (npm)

Malware
Nov 2025

nconf-wavefunction-titan-europa

npm

MAL-2025-188194

Malicious code in nconf-wavefunction-titan-europa (npm)

Malware
Nov 2025

development-cypress-nebula-spectron

npm

MAL-2025-186574

Malicious code in development-cypress-nebula-spectron (npm)

Malware
Nov 2025

firebase-command-ursa-websockets

npm

MAL-2025-186988

Malicious code in firebase-command-ursa-websockets (npm)

Malware
Nov 2025

dysonswarm-loop-command-uranology

npm

MAL-2025-186662

Malicious code in dysonswarm-loop-command-uranology (npm)

Malware
Nov 2025

chakra-ui-fornax-umbriel-wezen

npm

MAL-2025-186088

Malicious code in chakra-ui-fornax-umbriel-wezen (npm)

Malware
Nov 2025

blueshift-kuiperbelt-asteroid-dendrochronology

npm

MAL-2025-185863

Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm)

Malware
Nov 2025

dorado-hexo-sqlite-postcss-loader

npm

MAL-2025-186606

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

Malware
Nov 2025

package-nconf-antares-quasar

npm

MAL-2025-188492

Malicious code in package-nconf-antares-quasar (npm)

Malware
Nov 2025

google-darkmatter-xerxes-europa

npm

MAL-2025-187195

Malicious code in google-darkmatter-xerxes-europa (npm)

Malware
Nov 2025

neptune-middleware-mongoose-neptunology

npm

MAL-2025-188223

Malicious code in neptune-middleware-mongoose-neptunology (npm)

Malware
Nov 2025

miranda-eigenstate-markdownlint-cosmogenic

npm

MAL-2025-188068

Malicious code in miranda-eigenstate-markdownlint-cosmogenic (npm)

Malware
Nov 2025

rest-version-library-hadron

npm

MAL-2025-189217

Malicious code in rest-version-library-hadron (npm)

Malware
Nov 2025

exoplanetology-grus-mdx-comet

npm

MAL-2025-186912

Malicious code in exoplanetology-grus-mdx-comet (npm)

Malware
Nov 2025

gravity-juno-cors-sirius

npm

MAL-2025-187216

Malicious code in gravity-juno-cors-sirius (npm)

Malware
Nov 2025

parsec-build-nconf-miranda

npm

MAL-2025-188568

Malicious code in parsec-build-nconf-miranda (npm)

Malware
Nov 2025

nextjs-shelljs-centaurus-singularity

npm

MAL-2025-188269

Malicious code in nextjs-shelljs-centaurus-singularity (npm)

Malware
Nov 2025
Showing 16801 - 16824 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001