Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,664
Total Incidents

magellan-astro-webdriverio-enceladus

npm

MAL-2025-187896

Malicious code in magellan-astro-webdriverio-enceladus (npm)

Malware
Nov 2025

authenticate-array-cluster-mock-import

npm

MAL-2025-185669

Malicious code in authenticate-array-cluster-mock-import (npm)

Malware
Nov 2025

deneb-juno-virtualreality-middleware

npm

MAL-2025-186548

Malicious code in deneb-juno-virtualreality-middleware (npm)

Malware
Nov 2025

hermes-child-process-apex-centauri

npm

MAL-2025-187342

Malicious code in hermes-child-process-apex-centauri (npm)

Malware
Nov 2025

publish-xanthus-cypress-redis

npm

MAL-2025-188962

Malicious code in publish-xanthus-cypress-redis (npm)

Malware
Nov 2025

bad-transpile-xml-signal-cache

npm

MAL-2025-185740

Malicious code in bad-transpile-xml-signal-cache (npm)

Malware
Nov 2025

duplex-tailwindcss-nestjs-polaris

npm

MAL-2025-186650

Malicious code in duplex-tailwindcss-nestjs-polaris (npm)

Malware
Nov 2025

magnetar-palynology-uranology-blackhole

npm

MAL-2025-187911

Malicious code in magnetar-palynology-uranology-blackhole (npm)

Malware
Nov 2025

static-public-omega-abstract-upsilon

npm

MAL-2025-189660

Malicious code in static-public-omega-abstract-upsilon (npm)

Malware
Nov 2025

oortcloud-css-minimizer-webpack-plugin-config-cryovolcano

npm

MAL-2025-188431

Malicious code in oortcloud-css-minimizer-webpack-plugin-config-cryovolcano (npm)

Malware
Nov 2025

dagda-tectonophysics-materialize-astrometry

npm

MAL-2025-186477

Malicious code in dagda-tectonophysics-materialize-astrometry (npm)

Malware
Nov 2025

eslint-config-antares-deneb-scorpius

npm

MAL-2025-186832

Malicious code in eslint-config-antares-deneb-scorpius (npm)

Malware
Nov 2025

cygnus-tool-update-xenos

npm

MAL-2025-186442

Malicious code in cygnus-tool-update-xenos (npm)

Malware
Nov 2025

photon-darkenergy-mocha-terraforming

npm

MAL-2025-188687

Malicious code in photon-darkenergy-mocha-terraforming (npm)

Malware
Nov 2025

metalsmith-ganymede-gravitationalwave-biogeochemistry

npm

MAL-2025-188007

Malicious code in metalsmith-ganymede-gravitationalwave-biogeochemistry (npm)

Malware
Nov 2025

deimos-selenium-local-futurology

npm

MAL-2025-186521

Malicious code in deimos-selenium-local-futurology (npm)

Malware
Nov 2025

scripts-private-frontend-fornax

npm

MAL-2025-189390

Malicious code in scripts-private-frontend-fornax (npm)

Malware
Nov 2025

ultra-html-webpack-plugin-zenith-quito

npm

MAL-2025-190030

Malicious code in ultra-html-webpack-plugin-zenith-quito (npm)

Malware
Nov 2025

json-babel-regulus-void

npm

MAL-2025-187623

Malicious code in json-babel-regulus-void (npm)

Malware
Nov 2025

pulsar-selenium-oortcloud-dorado

npm

MAL-2025-188977

Malicious code in pulsar-selenium-oortcloud-dorado (npm)

Malware
Nov 2025

quantum-child-process-vulcan-sagitta

npm

MAL-2025-188993

Malicious code in quantum-child-process-vulcan-sagitta (npm)

Malware
Nov 2025

lambda-quick-monitor-optimize-book

npm

MAL-2025-187726

Malicious code in lambda-quick-monitor-optimize-book (npm)

Malware
Nov 2025

pavo-helmet-titan-kinetic

npm

MAL-2025-188589

Malicious code in pavo-helmet-titan-kinetic (npm)

Malware
Nov 2025

xenos-nconf-aurora-redis

npm

MAL-2025-190380

Malicious code in xenos-nconf-aurora-redis (npm)

Malware
Nov 2025
Showing 18625 - 18648 of 223,664
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001