Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,663
Total Incidents

alphard-webdriverio-titan-elektra

npm

MAL-2025-185445

Malicious code in alphard-webdriverio-titan-elektra (npm)

Malware
Nov 2025

forever-iota-callback-vulcan

npm

MAL-2025-187012

Malicious code in forever-iota-callback-vulcan (npm)

Malware
Nov 2025

postcss-loader-oscillation-supervisor-stratigraphy

npm

MAL-2025-188782

Malicious code in postcss-loader-oscillation-supervisor-stratigraphy (npm)

Malware
Nov 2025

radiant-express-sync-tachyon

npm

MAL-2025-189055

Malicious code in radiant-express-sync-tachyon (npm)

Malware
Nov 2025

got-loglevel-ceres-acamar

npm

MAL-2025-187200

Malicious code in got-loglevel-ceres-acamar (npm)

Malware
Nov 2025

epigenetics-html-webpack-plugin-magellan-augmentedreality

npm

MAL-2025-186780

Malicious code in epigenetics-html-webpack-plugin-magellan-augmentedreality (npm)

Malware
Nov 2025

prompts-capella-node-config-biomimicry

npm

MAL-2025-188868

Malicious code in prompts-capella-node-config-biomimicry (npm)

Malware
Nov 2025

umbra-enif-sirius-lightyear

npm

MAL-2025-190036

Malicious code in umbra-enif-sirius-lightyear (npm)

Malware
Nov 2025

graphql-npm-soap-fermiparadox

npm

MAL-2025-187207

Malicious code in graphql-npm-soap-fermiparadox (npm)

Malware
Nov 2025

inquirer-flare-sass-loader-tectonic

npm

MAL-2025-187487

Malicious code in inquirer-flare-sass-loader-tectonic (npm)

Malware
Nov 2025

fomalhaut-restart-loglevel-forever

npm

MAL-2025-187007

Malicious code in fomalhaut-restart-loglevel-forever (npm)

Malware
Nov 2025

kinetic-configstore-nuxtjs-colors

npm

MAL-2025-187689

Malicious code in kinetic-configstore-nuxtjs-colors (npm)

Malware
Nov 2025

quasar-capella-bootstrap-kastra

npm

MAL-2025-189029

Malicious code in quasar-capella-bootstrap-kastra (npm)

Malware
Nov 2025

chakra-ui-fomalhaut-on-cosmochemistry

npm

MAL-2025-186087

Malicious code in chakra-ui-fomalhaut-on-cosmochemistry (npm)

Malware
Nov 2025

lepton-husky-phenomic-hermes

npm

MAL-2025-187742

Malicious code in lepton-husky-phenomic-hermes (npm)

Malware
Nov 2025

dione-kastra-public-react-bootstrap

npm

MAL-2025-186587

Malicious code in dione-kastra-public-react-bootstrap (npm)

Malware
Nov 2025

cordelia-indus-cors-dotenv-safe

npm

MAL-2025-186307

Malicious code in cordelia-indus-cors-dotenv-safe (npm)

Malware
Nov 2025

ursa-lynx-baryon-ophiuchus

npm

MAL-2025-190110

Malicious code in ursa-lynx-baryon-ophiuchus (npm)

Malware
Nov 2025

resonance-centaurus-luna-interstellarmedium

npm

MAL-2025-189206

Malicious code in resonance-centaurus-luna-interstellarmedium (npm)

Malware
Nov 2025

meteor-hadron-hermes-lint

npm

MAL-2025-188025

Malicious code in meteor-hadron-hermes-lint (npm)

Malware
Nov 2025

webpack-query-thermochronology-antimatter

npm

MAL-2025-190292

Malicious code in webpack-query-thermochronology-antimatter (npm)

Malware
Nov 2025

secure-compress-phi-bash-orchestrate

npm

MAL-2025-189395

Malicious code in secure-compress-phi-bash-orchestrate (npm)

Malware
Nov 2025

astrometry-halley-auriga-cressida

npm

MAL-2025-185602

Malicious code in astrometry-halley-auriga-cressida (npm)

Malware
Nov 2025

changelog-tachyon-writable-pipe

npm

MAL-2025-186117

Malicious code in changelog-tachyon-writable-pipe (npm)

Malware
Nov 2025
Showing 17761 - 17784 of 223,663
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001