Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,672
Total Incidents

scripts-jabbah-apollo-phenomic

npm

MAL-2025-189388

Malicious code in scripts-jabbah-apollo-phenomic (npm)

Malware
Nov 2025

tau-data-grid-minify-function

npm

MAL-2025-189814

Malicious code in tau-data-grid-minify-function (npm)

Malware
Nov 2025

dione-dorado-apollo-mongodb

npm

MAL-2025-186586

Malicious code in dione-dorado-apollo-mongodb (npm)

Malware
Nov 2025

array-simple-water-tau-book

npm

MAL-2025-185570

Malicious code in array-simple-water-tau-book (npm)

Malware
Nov 2025

commitizen-chromedriver-redis-polaris

npm

MAL-2025-186239

Malicious code in commitizen-chromedriver-redis-polaris (npm)

Malware
Nov 2025

wavefunction-crust-interstellarmedium-bootstrap

npm

MAL-2025-190247

Malicious code in wavefunction-crust-interstellarmedium-bootstrap (npm)

Malware
Nov 2025

css-minimizer-webpack-plugin-hermes-spectron-pavo

npm

MAL-2025-186421

Malicious code in css-minimizer-webpack-plugin-hermes-spectron-pavo (npm)

Malware
Nov 2025

spy-sun-byte-debug-import

npm

MAL-2025-189632

Malicious code in spy-sun-byte-debug-import (npm)

Malware
Nov 2025

playwright-asthenosphere-norma-cassini

npm

MAL-2025-188741

Malicious code in playwright-asthenosphere-norma-cassini (npm)

Malware
Nov 2025

markdown-cors-janus-dotenv-parse-variables

npm

MAL-2025-187922

Malicious code in markdown-cors-janus-dotenv-parse-variables (npm)

Malware
Nov 2025

heka-buffer-holography-subduction

npm

MAL-2025-187302

Malicious code in heka-buffer-holography-subduction (npm)

Malware
Nov 2025

impulse-holography-grunt-sequelize

npm

MAL-2025-187445

Malicious code in impulse-holography-grunt-sequelize (npm)

Malware
Nov 2025

apex-tool-colors-cz-conventional-changelog

npm

MAL-2025-185495

Malicious code in apex-tool-colors-cz-conventional-changelog (npm)

Malware
Nov 2025

small-route-assert-compile-interface

npm

MAL-2025-189548

Malicious code in small-route-assert-compile-interface (npm)

Malware
Nov 2025

protractor-farout-dorado-ariel

npm

MAL-2025-188898

Malicious code in protractor-farout-dorado-ariel (npm)

Malware
Nov 2025

primatology-algol-postgres-unuk

npm

MAL-2025-188814

Malicious code in primatology-algol-postgres-unuk (npm)

Malware
Nov 2025

protractor-eclipse-ini-subscription

npm

MAL-2025-188897

Malicious code in protractor-eclipse-ini-subscription (npm)

Malware
Nov 2025

soap-wasat-frontend-astroinformatics

npm

MAL-2025-189559

Malicious code in soap-wasat-frontend-astroinformatics (npm)

Malware
Nov 2025

electron-tool-nashira-gemini

npm

MAL-2025-186706

Malicious code in electron-tool-nashira-gemini (npm)

Malware
Nov 2025

plutology-alphard-achernar-antd

npm

MAL-2025-188748

Malicious code in plutology-alphard-achernar-antd (npm)

Malware
Nov 2025

draco-terser-webpack-plugin-hermes-corvus

npm

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

Malware
Nov 2025

cz-conventional-changelog-selenium-xanadu-enif

npm

MAL-2025-186456

Malicious code in cz-conventional-changelog-selenium-xanadu-enif (npm)

Malware
Nov 2025

exoplanetology-superflare-webdriver-manager-ablation

npm

MAL-2025-186914

Malicious code in exoplanetology-superflare-webdriver-manager-ablation (npm)

Malware
Nov 2025

mocha-eventhoriz-wavefunction-redshift

npm

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)

Malware
Nov 2025
Showing 20137 - 20160 of 223,672
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001