Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,672
Total Incidents

browserify-izar-archaeogenetics-darkmatter

npm

MAL-2025-185915

Malicious code in browserify-izar-archaeogenetics-darkmatter (npm)

Malware
Nov 2025

eris-framework-lacerta-biomimicry

npm

MAL-2025-186815

Malicious code in eris-framework-lacerta-biomimicry (npm)

Malware
Nov 2025

hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado

npm

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

Malware
Nov 2025

tool-nightmare-cryovolcano-cryptography

npm

MAL-2025-189956

Malicious code in tool-nightmare-cryovolcano-cryptography (npm)

Malware
Nov 2025

greatfilter-greatfilter-kastra-eslint-config

npm

MAL-2025-187220

Malicious code in greatfilter-greatfilter-kastra-eslint-config (npm)

Malware
Nov 2025

element-ui-fermiparadox-carpo-orogeny

npm

MAL-2025-186713

Malicious code in element-ui-fermiparadox-carpo-orogeny (npm)

Malware
Nov 2025

taurus-configstore-delphinus-nightmare

npm

MAL-2025-189824

Malicious code in taurus-configstore-delphinus-nightmare (npm)

Malware
Nov 2025

darkmatter-exosphere-exoplanetology-yakutsk

npm

MAL-2025-186486

Malicious code in darkmatter-exosphere-exoplanetology-yakutsk (npm)

Malware
Nov 2025

superflare-tectonophysics-less-deimos

npm

MAL-2025-189757

Malicious code in superflare-tectonophysics-less-deimos (npm)

Malware
Nov 2025

stub-emulate-decompress-view-sandbox

npm

MAL-2025-189702

Malicious code in stub-emulate-decompress-view-sandbox (npm)

Malware
Nov 2025

event-husky-tachyon-auth0

npm

MAL-2025-186876

Malicious code in event-husky-tachyon-auth0 (npm)

Malware
Nov 2025

psi-sudo-key-simulate-double

npm

MAL-2025-188931

Malicious code in psi-sudo-key-simulate-double (npm)

Malware
Nov 2025

cordelia-async-chariklo-farout

npm

MAL-2025-186303

Malicious code in cordelia-async-chariklo-farout (npm)

Malware
Nov 2025

daemon-function-throw-file-dog

npm

MAL-2025-186465

Malicious code in daemon-function-throw-file-dog (npm)

Malware
Nov 2025

speleology-ganymede-halley-panspermia

npm

MAL-2025-189619

Malicious code in speleology-ganymede-halley-panspermia (npm)

Malware
Nov 2025

wasat-rimraf-csrf-halley

npm

MAL-2025-190236

Malicious code in wasat-rimraf-csrf-halley (npm)

Malware
Nov 2025

elektra-xml-grus-hugo

npm

MAL-2025-186710

Malicious code in elektra-xml-grus-hugo (npm)

Malware
Nov 2025

pavo-xenon-markdownlint-enceladus

npm

MAL-2025-188591

Malicious code in pavo-xenon-markdownlint-enceladus (npm)

Malware
Nov 2025

dysonswarm-joviology-node-sass-troposphere

npm

MAL-2025-186660

Malicious code in dysonswarm-joviology-node-sass-troposphere (npm)

Malware
Nov 2025

passport-pino-library-schema

npm

MAL-2025-188579

Malicious code in passport-pino-library-schema (npm)

Malware
Nov 2025

yaml-phoenix-sequelize-redshift

npm

MAL-2025-190429

Malicious code in yaml-phoenix-sequelize-redshift (npm)

Malware
Nov 2025

inflation-hercules-websockets-private

npm

MAL-2025-187465

Malicious code in inflation-hercules-websockets-private (npm)

Malware
Nov 2025

module-biomimicry-rollup-comet

npm

MAL-2025-188098

Malicious code in module-biomimicry-rollup-comet (npm)

Malware
Nov 2025

fornax-jest-ariel-spica

npm

MAL-2025-187031

Malicious code in fornax-jest-ariel-spica (npm)

Malware
Nov 2025
Showing 19873 - 19896 of 223,672
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001