Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,672
Total Incidents

psi-sudo-key-simulate-double

npm

MAL-2025-188931

Malicious code in psi-sudo-key-simulate-double (npm)

Malware
Nov 2025

native-thermosphere-hermes-server

npm

MAL-2025-188186

Malicious code in native-thermosphere-hermes-server (npm)

Malware
Nov 2025

singularity-darkmatter-janus-browserify

npm

MAL-2025-189508

Malicious code in singularity-darkmatter-janus-browserify (npm)

Malware
Nov 2025

plutology-cosmicray-fornax-babel

npm

MAL-2025-188751

Malicious code in plutology-cosmicray-fornax-babel (npm)

Malware
Nov 2025

speleology-ganymede-halley-panspermia

npm

MAL-2025-189619

Malicious code in speleology-ganymede-halley-panspermia (npm)

Malware
Nov 2025

eridanus-middleware-meissa-io

npm

MAL-2025-186810

Malicious code in eridanus-middleware-meissa-io (npm)

Malware
Nov 2025

mineralogy-oauth-eslint-node-sass

npm

MAL-2025-188046

Malicious code in mineralogy-oauth-eslint-node-sass (npm)

Malware
Nov 2025

babel-dynamo-loop-terraforming

npm

MAL-2025-185719

Malicious code in babel-dynamo-loop-terraforming (npm)

Malware
Nov 2025

graviton-hapi-less-loader-electron

npm

MAL-2025-187211

Malicious code in graviton-hapi-less-loader-electron (npm)

Malware
Nov 2025

figures-miranda-helmet-exec

npm

MAL-2025-186969

Malicious code in figures-miranda-helmet-exec (npm)

Malware
Nov 2025

mocha-eventhoriz-wavefunction-redshift

npm

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)

Malware
Nov 2025

cordelia-async-chariklo-farout

npm

MAL-2025-186303

Malicious code in cordelia-async-chariklo-farout (npm)

Malware
Nov 2025

postcss-loader-prosthetics-loopback-javascript

npm

MAL-2025-188783

Malicious code in postcss-loader-prosthetics-loopback-javascript (npm)

Malware
Nov 2025

pino-pretty-phenomic-quasar-meteor

npm

MAL-2025-188706

Malicious code in pino-pretty-phenomic-quasar-meteor (npm)

Malware
Nov 2025

justmeteai

npm

MAL-2025-187643

Malicious code in justmeteai (npm)

Malware
Nov 2025

mesosphere-private-farout-boson

npm

MAL-2025-187994

Malicious code in mesosphere-private-farout-boson (npm)

Malware
Nov 2025

planetology-deneb-betelgeuse-ini

npm

MAL-2025-188735

Malicious code in planetology-deneb-betelgeuse-ini (npm)

Malware
Nov 2025

baryon-sublimation-apollo-shelljs

npm

MAL-2025-185756

Malicious code in baryon-sublimation-apollo-shelljs (npm)

Malware
Nov 2025

passport-pino-library-schema

npm

MAL-2025-188579

Malicious code in passport-pino-library-schema (npm)

Malware
Nov 2025

comet-pyxis-cosmochemistry-library

npm

MAL-2025-186224

Malicious code in comet-pyxis-cosmochemistry-library (npm)

Malware
Nov 2025

child-process-eridanus-cypress-zephyr

npm

MAL-2025-186144

Malicious code in child-process-eridanus-cypress-zephyr (npm)

Malware
Nov 2025

promise-dog-link-authorize-boolean

npm

MAL-2025-188856

Malicious code in promise-dog-link-authorize-boolean (npm)

Malware
Nov 2025

cross-env-singularity-europa-paleobotany

npm

MAL-2025-186386

Malicious code in cross-env-singularity-europa-paleobotany (npm)

Malware
Nov 2025

pavo-xenon-markdownlint-enceladus

npm

MAL-2025-188591

Malicious code in pavo-xenon-markdownlint-enceladus (npm)

Malware
Nov 2025
Showing 20017 - 20040 of 223,672
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001