Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,672
Total Incidents

tethys-deimos-spinner-eslint-config

npm

MAL-2025-189904

Malicious code in tethys-deimos-spinner-eslint-config (npm)

Malware
Nov 2025

array-benchmark-socket-dog-fork

npm

MAL-2025-185566

Malicious code in array-benchmark-socket-dog-fork (npm)

Malware
Nov 2025

terser-webpack-plugin-nestjs-umbriel-cluster

npm

MAL-2025-189875

Malicious code in terser-webpack-plugin-nestjs-umbriel-cluster (npm)

Malware
Nov 2025

rocket-eleventy-alphard-changelog

npm

MAL-2025-189257

Malicious code in rocket-eleventy-alphard-changelog (npm)

Malware
Nov 2025

meta-code-debug-key-old

npm

MAL-2025-187997

Malicious code in meta-code-debug-key-old (npm)

Malware
Nov 2025

umbriel-gulp-sqlite-shelljs

npm

MAL-2025-190045

Malicious code in umbriel-gulp-sqlite-shelljs (npm)

Malware
Nov 2025

upsilon-fork-pi-index-emulate

npm

MAL-2025-190093

Malicious code in upsilon-fork-pi-index-emulate (npm)

Malware
Nov 2025

equinox-cosmicsilence-subscription-redis

npm

MAL-2025-186795

Malicious code in equinox-cosmicsilence-subscription-redis (npm)

Malware
Nov 2025

nanotechnology-seismology-dotenv-parse-variables-darkenergy

npm

MAL-2025-188169

Malicious code in nanotechnology-seismology-dotenv-parse-variables-darkenergy (npm)

Malware
Nov 2025

compress-async-rho-boolean-assert

npm

MAL-2025-186262

Malicious code in compress-async-rho-boolean-assert (npm)

Malware
Nov 2025

rocket-graviton-aurora-blueshift

npm

MAL-2025-189260

Malicious code in rocket-graviton-aurora-blueshift (npm)

Malware
Nov 2025

magellan-gravity-solarnebula-dotenv-safe

npm

MAL-2025-187903

Malicious code in magellan-gravity-solarnebula-dotenv-safe (npm)

Malware
Nov 2025

seismology-fornax-frontend-neutronstar

npm

MAL-2025-189424

Malicious code in seismology-fornax-frontend-neutronstar (npm)

Malware
Nov 2025

standard-parallax-chalk-hologram

npm

MAL-2025-189649

Malicious code in standard-parallax-chalk-hologram (npm)

Malware
Nov 2025

radioastronomy-eventhoriz-thuban-kinetic

npm

MAL-2025-189063

Malicious code in radioastronomy-eventhoriz-thuban-kinetic (npm)

Malware
Nov 2025

star-permission-parse-assert-small

npm

MAL-2025-189654

Malicious code in star-permission-parse-assert-small (npm)

Malware
Nov 2025

callback-dynamo-lacerta-chakra-ui

npm

MAL-2025-185973

Malicious code in callback-dynamo-lacerta-chakra-ui (npm)

Malware
Nov 2025

buffer-aldebaran-norma-test

npm

MAL-2025-185919

Malicious code in buffer-aldebaran-norma-test (npm)

Malware
Nov 2025

kinetic-upgrade-pino-sagitta

npm

MAL-2025-187696

Malicious code in kinetic-upgrade-pino-sagitta (npm)

Malware
Nov 2025

glaciology-nconf-eslint-plugin-farout

npm

MAL-2025-187172

Malicious code in glaciology-nconf-eslint-plugin-farout (npm)

Malware
Nov 2025

centaurus-perseus-remark-sync

npm

MAL-2025-186065

Malicious code in centaurus-perseus-remark-sync (npm)

Malware
Nov 2025

on-quantumfoam-nebula-cosmicweb

npm

MAL-2025-188428

Malicious code in on-quantumfoam-nebula-cosmicweb (npm)

Malware
Nov 2025

markdown-pdf-mdx-build-config

npm

MAL-2025-187934

Malicious code in markdown-pdf-mdx-build-config (npm)

Malware
Nov 2025

jekyll-resolvers-quark-xenobiology

npm

MAL-2025-187605

Malicious code in jekyll-resolvers-quark-xenobiology (npm)

Malware
Nov 2025
Showing 19705 - 19728 of 223,672
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001