Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

wasat-photon-await-mocha

npm

MAL-2025-190234

Malicious code in wasat-photon-await-mocha (npm)

Malware
Nov 2025

sedna-jest-init-delphinus

npm

MAL-2025-189412

Malicious code in sedna-jest-init-delphinus (npm)

Malware
Nov 2025

old-stub-xml-deploy-wind

npm

MAL-2025-188410

Malicious code in old-stub-xml-deploy-wind (npm)

Malware
Nov 2025

html-webpack-plugin-hologram-stream-install

npm

MAL-2025-187374

Malicious code in html-webpack-plugin-hologram-stream-install (npm)

Malware
Nov 2025

proxima-ophiuchus-geckodriver-html-webpack-plugin

npm

MAL-2025-188917

Malicious code in proxima-ophiuchus-geckodriver-html-webpack-plugin (npm)

Malware
Nov 2025

ichnology-ursa-petrology-cluster

npm

MAL-2025-187422

Malicious code in ichnology-ursa-petrology-cluster (npm)

Malware
Nov 2025

paleobotany-callback-magnetosphere-bellatrix

npm

MAL-2025-188498

Malicious code in paleobotany-callback-magnetosphere-bellatrix (npm)

Malware
Nov 2025

typeorm-warp-procyon-non-blocking

npm

MAL-2025-190020

Malicious code in typeorm-warp-procyon-non-blocking (npm)

Malware
Nov 2025

grus-pipe-websockets-grunt

npm

MAL-2025-187245

Malicious code in grus-pipe-websockets-grunt (npm)

Malware
Nov 2025

centauri-lint-staged-helios-sequelize

npm

MAL-2025-186049

Malicious code in centauri-lint-staged-helios-sequelize (npm)

Malware
Nov 2025

passport-selenium-terser-webpack-plugin-juno

npm

MAL-2025-188581

Malicious code in passport-selenium-terser-webpack-plugin-juno (npm)

Malware
Nov 2025

vuepress-parallax-socketio-juno

npm

MAL-2025-190192

Malicious code in vuepress-parallax-socketio-juno (npm)

Malware
Nov 2025

helios-cressida-biogeochemistry-halley

npm

MAL-2025-187315

Malicious code in helios-cressida-biogeochemistry-halley (npm)

Malware
Nov 2025

rehype-sequelize-avior-redis

npm

MAL-2025-189145

Malicious code in rehype-sequelize-avior-redis (npm)

Malware
Nov 2025

archaeometry-europa-asthenosphere-run-script

npm

MAL-2025-185535

Malicious code in archaeometry-europa-asthenosphere-run-script (npm)

Malware
Nov 2025

xo-nightmare-magellan-eslint-plugin

npm

MAL-2025-190410

Malicious code in xo-nightmare-magellan-eslint-plugin (npm)

Malware
Nov 2025

orogeny-algol-kastra-xo

npm

MAL-2025-188476

Malicious code in orogeny-algol-kastra-xo (npm)

Malware
Nov 2025

phoebe-borealis-vuepress-coronalmassejection

npm

MAL-2025-188668

Malicious code in phoebe-borealis-vuepress-coronalmassejection (npm)

Malware
Nov 2025

oscillation-aquarius-ursa-parallax

npm

MAL-2025-188482

Malicious code in oscillation-aquarius-ursa-parallax (npm)

Malware
Nov 2025

neutronstar-gravity-aether-bulma

npm

MAL-2025-188249

Malicious code in neutronstar-gravity-aether-bulma (npm)

Malware
Nov 2025

integer-lambda-notify-cache-try

npm

MAL-2025-187500

Malicious code in integer-lambda-notify-cache-try (npm)

Malware
Nov 2025

kappa-cache-process-byte-sudo

npm

MAL-2025-187654

Malicious code in kappa-cache-process-byte-sudo (npm)

Malware
Nov 2025

earth-omega-epsilon-error-compress

npm

MAL-2025-186664

Malicious code in earth-omega-epsilon-error-compress (npm)

Malware
Nov 2025

farout-gatsby-install-ganymede

npm

MAL-2025-186939

Malicious code in farout-gatsby-install-ganymede (npm)

Malware
Nov 2025
Showing 17041 - 17064 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001