Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,663
Total Incidents

stub-query-psi-throw-secure

npm

MAL-2025-189704

Malicious code in stub-query-psi-throw-secure (npm)

Malware
Nov 2025

io-publish-antd-outercore

npm

MAL-2025-187524

Malicious code in io-publish-antd-outercore (npm)

Malware
Nov 2025

biogeochemistry-xenos-nashira-petrology

npm

MAL-2025-185812

Malicious code in biogeochemistry-xenos-nashira-petrology (npm)

Malware
Nov 2025

fornax-janus-fusion-css-minimizer-webpack-plugin

npm

MAL-2025-187030

Malicious code in fornax-janus-fusion-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

draco-gacrux-carpo-await

npm

MAL-2025-186639

Malicious code in draco-gacrux-carpo-await (npm)

Malware
Nov 2025

tau-import-float-monitor-finally

npm

MAL-2025-189818

Malicious code in tau-import-float-monitor-finally (npm)

Malware
Nov 2025

neuromorphic-nextjs-phenomic-telesto

npm

MAL-2025-188244

Malicious code in neuromorphic-nextjs-phenomic-telesto (npm)

Malware
Nov 2025

build-commitlint-config-angular-lithosphere-string

npm

MAL-2025-185924

Malicious code in build-commitlint-config-angular-lithosphere-string (npm)

Malware
Nov 2025

quark-postcss-soap-nova

npm

MAL-2025-189025

Malicious code in quark-postcss-soap-nova (npm)

Malware
Nov 2025

sirius-stop-umbra-spawn

npm

MAL-2025-189525

Malicious code in sirius-stop-umbra-spawn (npm)

Malware
Nov 2025

miranda-gacrux-stratigraphy-node-sass

npm

MAL-2025-188072

Malicious code in miranda-gacrux-stratigraphy-node-sass (npm)

Malware
Nov 2025

optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda

npm

MAL-2025-188450

Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda (npm)

Malware
Nov 2025

regulus-xenos-yonder-frontend

npm

MAL-2025-189141

Malicious code in regulus-xenos-yonder-frontend (npm)

Malware
Nov 2025

materialize-repository-dione-aquarius

npm

MAL-2025-187947

Malicious code in materialize-repository-dione-aquarius (npm)

Malware
Nov 2025

global-polaris-spica-iota

npm

MAL-2025-187184

Malicious code in global-polaris-spica-iota (npm)

Malware
Nov 2025

sed-shell-cat-encrypt-parse

npm

MAL-2025-189405

Malicious code in sed-shell-cat-encrypt-parse (npm)

Malware
Nov 2025

odin-lepton-superagent-uninstall

npm

MAL-2025-188399

Malicious code in odin-lepton-superagent-uninstall (npm)

Malware
Nov 2025

string-optimize-class-link-authorize

npm

MAL-2025-189699

Malicious code in string-optimize-class-link-authorize (npm)

Malware
Nov 2025

xerxes-non-blocking-baryon-solarnebula

npm

MAL-2025-190386

Malicious code in xerxes-non-blocking-baryon-solarnebula (npm)

Malware
Nov 2025

lint-remark-meteor-neptune

npm

MAL-2025-187811

Malicious code in lint-remark-meteor-neptune (npm)

Malware
Nov 2025

antares-aether-run-script-pino-pretty

npm

MAL-2025-185458

Malicious code in antares-aether-run-script-pino-pretty (npm)

Malware
Nov 2025

local-astrobiology-magellan-airbnb

npm

MAL-2025-187835

Malicious code in local-astrobiology-magellan-airbnb (npm)

Malware
Nov 2025

on-planckscale-sequelize-comet

npm

MAL-2025-188427

Malicious code in on-planckscale-sequelize-comet (npm)

Malware
Nov 2025

cloud-analyze-spy-thread-object

npm

MAL-2025-186171

Malicious code in cloud-analyze-spy-thread-object (npm)

Malware
Nov 2025
Showing 17473 - 17496 of 223,663
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001