Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,663
Total Incidents

bad-stub-key-fast-minify

npm

MAL-2025-185739

Malicious code in bad-stub-key-fast-minify (npm)

Malware
Nov 2025

hexo-commitlint-config-angular-nuxtjs-neptune

npm

MAL-2025-187351

Malicious code in hexo-commitlint-config-angular-nuxtjs-neptune (npm)

Malware
Nov 2025

upgrade-ophiuchus-nightwatch-lyra

npm

MAL-2025-190087

Malicious code in upgrade-ophiuchus-nightwatch-lyra (npm)

Malware
Nov 2025

electron-nconf-callisto-flare

npm

MAL-2025-186702

Malicious code in electron-nconf-callisto-flare (npm)

Malware
Nov 2025

luna-xanadu-aquarius-barnard

npm

MAL-2025-187881

Malicious code in luna-xanadu-aquarius-barnard (npm)

Malware
Nov 2025

mensa-spectron-webdriver-prettier-stylelint-zenobia

npm

MAL-2025-187982

Malicious code in mensa-spectron-webdriver-prettier-stylelint-zenobia (npm)

Malware
Nov 2025

subscription-nightmare-nightmare-webdriver-manager

npm

MAL-2025-189724

Malicious code in subscription-nightmare-nightmare-webdriver-manager (npm)

Malware
Nov 2025

io-gulp-apollo-javascript

npm

MAL-2025-187521

Malicious code in io-gulp-apollo-javascript (npm)

Malware
Nov 2025

brane-mocha-elektra-farout

npm

MAL-2025-185908

Malicious code in brane-mocha-elektra-farout (npm)

Malware
Nov 2025

aldebaran-biosignature-darkenergy-pavo

npm

MAL-2025-185414

Malicious code in aldebaran-biosignature-darkenergy-pavo (npm)

Malware
Nov 2025

meteor-lacerta-fornax-cryonics

npm

MAL-2025-188027

Malicious code in meteor-lacerta-fornax-cryonics (npm)

Malware
Nov 2025

dotenv-safe-norma-vuetify-paleomagnetism

npm

MAL-2025-186623

Malicious code in dotenv-safe-norma-vuetify-paleomagnetism (npm)

Malware
Nov 2025

parsec-oauth-jsonp-eslint-config

npm

MAL-2025-188570

Malicious code in parsec-oauth-jsonp-eslint-config (npm)

Malware
Nov 2025

plutology-alphard-achernar-antd

npm

MAL-2025-188748

Malicious code in plutology-alphard-achernar-antd (npm)

Malware
Nov 2025

eris-sync-loglevel-dorado

npm

MAL-2025-186820

Malicious code in eris-sync-loglevel-dorado (npm)

Malware
Nov 2025

ophiuchus-corvus-stream-deimos

npm

MAL-2025-188438

Malicious code in ophiuchus-corvus-stream-deimos (npm)

Malware
Nov 2025

centauri-mesosphere-deneb-solarnebula

npm

MAL-2025-186052

Malicious code in centauri-mesosphere-deneb-solarnebula (npm)

Malware
Nov 2025

tachyon-asthenosphere-less-loader-dagda

npm

MAL-2025-189797

Malicious code in tachyon-asthenosphere-less-loader-dagda (npm)

Malware
Nov 2025

duplex-eslint-plugin-apex-taphonomy

npm

MAL-2025-186645

Malicious code in duplex-eslint-plugin-apex-taphonomy (npm)

Malware
Nov 2025

cold-mock-daemon-hash-thread

npm

MAL-2025-186200

Malicious code in cold-mock-daemon-hash-thread (npm)

Malware
Nov 2025

eslint-loop-meteor-jasmine

npm

MAL-2025-186840

Malicious code in eslint-loop-meteor-jasmine (npm)

Malware
Nov 2025

enum-new-encode-tree-cluster

npm

MAL-2025-186766

Malicious code in enum-new-encode-tree-cluster (npm)

Malware
Nov 2025

wezen-paleoanthropology-betelgeuse-asthenosphere

npm

MAL-2025-190315

Malicious code in wezen-paleoanthropology-betelgeuse-asthenosphere (npm)

Malware
Nov 2025

xenobiology-galaxy-supervisor-ophiuchus

npm

MAL-2025-190364

Malicious code in xenobiology-galaxy-supervisor-ophiuchus (npm)

Malware
Nov 2025
Showing 18097 - 18120 of 223,663
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001