Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,660
Total Incidents

resolve-code-sun-sanitize-fast

npm

MAL-2025-189192

Malicious code in resolve-code-sun-sanitize-fast (npm)

Malware
Nov 2025

quick-validate-transpile-cluster-route

npm

MAL-2025-189047

Malicious code in quick-validate-transpile-cluster-route (npm)

Malware
Nov 2025

cladistics-markdown-pdf-helmet-betelgeuse

npm

MAL-2025-186156

Malicious code in cladistics-markdown-pdf-helmet-betelgeuse (npm)

Malware
Nov 2025

procyon-aurora-zenith-indus

npm

MAL-2025-188840

Malicious code in procyon-aurora-zenith-indus (npm)

Malware
Nov 2025

signal-throw-pi-sun-sigma

npm

MAL-2025-189497

Malicious code in signal-throw-pi-sun-sigma (npm)

Malware
Nov 2025

gemini-gravity-xanadu-css-minimizer-webpack-plugin

npm

MAL-2025-187137

Malicious code in gemini-gravity-xanadu-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

nextjs-event-chromedriver-pm2

npm

MAL-2025-188262

Malicious code in nextjs-event-chromedriver-pm2 (npm)

Malware
Nov 2025

nashira-materialize-publish-galaxy

npm

MAL-2025-188172

Malicious code in nashira-materialize-publish-galaxy (npm)

Malware
Nov 2025

changelog-borealis-resolvers-resonance

npm

MAL-2025-186108

Malicious code in changelog-borealis-resolvers-resonance (npm)

Malware
Nov 2025

dorado-jest-gatsby-fornax

npm

MAL-2025-186608

Malicious code in dorado-jest-gatsby-fornax (npm)

Malware
Nov 2025

toml-protractor-spinner-inflation

npm

MAL-2025-189949

Malicious code in toml-protractor-spinner-inflation (npm)

Malware
Nov 2025

ophiuchus-bootstrap-perseus-airbnb

npm

MAL-2025-188435

Malicious code in ophiuchus-bootstrap-perseus-airbnb (npm)

Malware
Nov 2025

miranda-borealis-nova-dotenv-safe

npm

MAL-2025-188065

Malicious code in miranda-borealis-nova-dotenv-safe (npm)

Malware
Nov 2025

jabbah-colors-parsec-chromedriver

npm

MAL-2025-187561

Malicious code in jabbah-colors-parsec-chromedriver (npm)

Malware
Nov 2025

dagda-geckodriver-perturbation-geodynamo

npm

MAL-2025-186470

Malicious code in dagda-geckodriver-perturbation-geodynamo (npm)

Malware
Nov 2025

antares-jsonp-charon-europa

npm

MAL-2025-185468

Malicious code in antares-jsonp-charon-europa (npm)

Malware
Nov 2025

long-final-minify-load-tree

npm

MAL-2025-187857

Malicious code in long-final-minify-load-tree (npm)

Malware
Nov 2025

unuk-tethys-blueshift-cosmicsilence

npm

MAL-2025-190071

Malicious code in unuk-tethys-blueshift-cosmicsilence (npm)

Malware
Nov 2025

eslint-config-nebula-magnetosphere-vuetify

npm

MAL-2025-186836

Malicious code in eslint-config-nebula-magnetosphere-vuetify (npm)

Malware
Nov 2025

zephyr-dotenv-technosignature-uranology

npm

MAL-2025-190461

Malicious code in zephyr-dotenv-technosignature-uranology (npm)

Malware
Nov 2025

html-webpack-plugin-vega-atlas-fetch

npm

MAL-2025-187378

Malicious code in html-webpack-plugin-vega-atlas-fetch (npm)

Malware
Nov 2025

fermion-solis-wezen-browserify

npm

MAL-2025-186951

Malicious code in fermion-solis-wezen-browserify (npm)

Malware
Nov 2025

troposphere-comet-changelog-html-webpack-plugin

npm

MAL-2025-190004

Malicious code in troposphere-comet-changelog-html-webpack-plugin (npm)

Malware
Nov 2025

byte-root-test-kappa-sudo

npm

MAL-2025-185959

Malicious code in byte-root-test-kappa-sudo (npm)

Malware
Nov 2025
Showing 17305 - 17328 of 223,660
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001