Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

exec-zephyr-xo-izar

npm

MAL-2025-186894

Malicious code in exec-zephyr-xo-izar (npm)

Malware
Nov 2025

perturbation-thuban-neuromorphic-dynamo

npm

MAL-2025-188645

Malicious code in perturbation-thuban-neuromorphic-dynamo (npm)

Malware
Nov 2025

eventhoriz-ariel-atlas-lacerta

npm

MAL-2025-186878

Malicious code in eventhoriz-ariel-atlas-lacerta (npm)

Malware
Nov 2025

ichnology-ursa-petrology-cluster

npm

MAL-2025-187422

Malicious code in ichnology-ursa-petrology-cluster (npm)

Malware
Nov 2025

prosthetics-janus-cosmicray-spectron

npm

MAL-2025-188878

Malicious code in prosthetics-janus-cosmicray-spectron (npm)

Malware
Nov 2025

paleobotany-commitlint-config-angular-ultra-nebula

npm

MAL-2025-188499

Malicious code in paleobotany-commitlint-config-angular-ultra-nebula (npm)

Malware
Nov 2025

rehype-sequelize-avior-redis

npm

MAL-2025-189145

Malicious code in rehype-sequelize-avior-redis (npm)

Malware
Nov 2025

socketio-polaris-restart-adonis

npm

MAL-2025-189579

Malicious code in socketio-polaris-restart-adonis (npm)

Malware
Nov 2025

await-lacerta-ganymede-commitizen

npm

MAL-2025-185696

Malicious code in await-lacerta-ganymede-commitizen (npm)

Malware
Nov 2025

chalk-mira-procyon-schema

npm

MAL-2025-186097

Malicious code in chalk-mira-procyon-schema (npm)

Malware
Nov 2025

csv-steganography-sadr-buffer

npm

MAL-2025-186434

Malicious code in csv-steganography-sadr-buffer (npm)

Malware
Nov 2025

innercore-superposition-lint-staged-adonis

npm

MAL-2025-187485

Malicious code in innercore-superposition-lint-staged-adonis (npm)

Malware
Nov 2025

shell-process-eta-star-omicron

npm

MAL-2025-189472

Malicious code in shell-process-eta-star-omicron (npm)

Malware
Nov 2025

config-pipe-promise-start

npm

MAL-2025-186279

Malicious code in config-pipe-promise-start (npm)

Malware
Nov 2025

dotenv-parse-variables-astrobiology-readable-magellan

npm

MAL-2025-186615

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan (npm)

Malware
Nov 2025

gatsby-tardigrade-hyperion-got

npm

MAL-2025-187124

Malicious code in gatsby-tardigrade-hyperion-got (npm)

Malware
Nov 2025

paleoclimatology-sagitta-hydra-geochronology

npm

MAL-2025-188517

Malicious code in paleoclimatology-sagitta-hydra-geochronology (npm)

Malware
Nov 2025

cluster-sirius-promise-neutrino

npm

MAL-2025-186186

Malicious code in cluster-sirius-promise-neutrino (npm)

Malware
Nov 2025

hugo-capella-janus-nucleosynthesis

npm

MAL-2025-187383

Malicious code in hugo-capella-janus-nucleosynthesis (npm)

Malware
Nov 2025

concurrently-scripts-plutology-nightmare

npm

MAL-2025-186271

Malicious code in concurrently-scripts-plutology-nightmare (npm)

Malware
Nov 2025

cosmicweb-leda-sadr-reveal-md

npm

MAL-2025-186342

Malicious code in cosmicweb-leda-sadr-reveal-md (npm)

Malware
Nov 2025

long-nu-new-nu-cache

npm

MAL-2025-187860

Malicious code in long-nu-new-nu-cache (npm)

Malware
Nov 2025

assert-float-private-process-star

npm

MAL-2025-185577

Malicious code in assert-float-private-process-star (npm)

Malware
Nov 2025

callback-typeorm-venus-umbriel

npm

MAL-2025-185980

Malicious code in callback-typeorm-venus-umbriel (npm)

Malware
Nov 2025
Showing 16873 - 16896 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001