Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,672
Total Incidents

webpack-dotenv-safe-avior-nodejs

npm

MAL-2025-190288

Malicious code in webpack-dotenv-safe-avior-nodejs (npm)

Malware
Nov 2025

taphonomy-quantum-juno-eridanus

npm

MAL-2025-189808

Malicious code in taphonomy-quantum-juno-eridanus (npm)

Malware
Nov 2025

shelljs-package-writable-jabbah

npm

MAL-2025-189475

Malicious code in shelljs-package-writable-jabbah (npm)

Malware
Nov 2025

element-ui-nconf-oauth-webpack

npm

MAL-2025-186715

Malicious code in element-ui-nconf-oauth-webpack (npm)

Malware
Nov 2025

magnetar-geochemistry-remark-repository

npm

MAL-2025-187909

Malicious code in magnetar-geochemistry-remark-repository (npm)

Malware
Nov 2025

octans-command-io-command

npm

MAL-2025-188387

Malicious code in octans-command-io-command (npm)

Malware
Nov 2025

perseus-cache-neptune-jupiter

npm

MAL-2025-188619

Malicious code in perseus-cache-neptune-jupiter (npm)

Malware
Nov 2025

delphinus-passport-blazar-css-minimizer-webpack-plugin

npm

MAL-2025-186528

Malicious code in delphinus-passport-blazar-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

janus-proxima-commitizen-auriga

npm

MAL-2025-187578

Malicious code in janus-proxima-commitizen-auriga (npm)

Malware
Nov 2025

orogeny-karma-babel-sequelize

npm

MAL-2025-188479

Malicious code in orogeny-karma-babel-sequelize (npm)

Malware
Nov 2025

hawkingradiation-backend-farout-despina

npm

MAL-2025-187289

Malicious code in hawkingradiation-backend-farout-despina (npm)

Malware
Nov 2025

geomorphology-fermion-aquarius-oscillation

npm

MAL-2025-187169

Malicious code in geomorphology-fermion-aquarius-oscillation (npm)

Malware
Nov 2025

auth0-stratigraphy-ursa-cordelia

npm

MAL-2025-185668

Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

Malware
Nov 2025

yakutsk-electron-nebula-jekyll

npm

MAL-2025-190416

Malicious code in yakutsk-electron-nebula-jekyll (npm)

Malware
Nov 2025

jwt-rest-jest-pm2

npm

MAL-2025-187649

Malicious code in jwt-rest-jest-pm2 (npm)

Malware
Nov 2025

bash-water-resolve-unix-error

npm

MAL-2025-185761

Malicious code in bash-water-resolve-unix-error (npm)

Malware
Nov 2025

borealis-promise-spinner-ora

npm

MAL-2025-185897

Malicious code in borealis-promise-spinner-ora (npm)

Malware
Nov 2025

zenith-algol-nodejs-pegasus

npm

MAL-2025-190444

Malicious code in zenith-algol-nodejs-pegasus (npm)

Malware
Nov 2025

rest-nova-nightwatch-commitlint-config-angular

npm

MAL-2025-189213

Malicious code in rest-nova-nightwatch-commitlint-config-angular (npm)

Malware
Nov 2025

halley-fusion-parcel-node-sass

npm

MAL-2025-187267

Malicious code in halley-fusion-parcel-node-sass (npm)

Malware
Nov 2025

mutation-augmentedreality-archaeoastronomy-neutronstar

npm

MAL-2025-188150

Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar (npm)

Malware
Nov 2025

neptune-framework-cors-ora

npm

MAL-2025-188217

Malicious code in neptune-framework-cors-ora (npm)

Malware
Nov 2025

convict-thuban-blackhole-chromedriver

npm

MAL-2025-186300

Malicious code in convict-thuban-blackhole-chromedriver (npm)

Malware
Nov 2025

command-react-bootstrap-neuromorphic-magellan

npm

MAL-2025-186236

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

Malware
Nov 2025
Showing 19465 - 19488 of 223,672
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001