Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,942
Total Incidents

figures-materialize-markdown-pdf-miranda

npm

MAL-2025-186967

Malicious code in figures-materialize-markdown-pdf-miranda (npm)

Malware
Nov 2025

npm-publish-cross-env-jest

npm

MAL-2025-188363

Malicious code in npm-publish-cross-env-jest (npm)

Malware
Nov 2025

kappa-nu-daemon-async-bad

npm

MAL-2025-187660

Malicious code in kappa-nu-daemon-async-bad (npm)

Malware
Nov 2025

framework-writable-dotenv-parse-variables-yonder

npm

MAL-2025-187050

Malicious code in framework-writable-dotenv-parse-variables-yonder (npm)

Malware
Nov 2025

less-bioinformatics-ganymede-virtualreality

npm

MAL-2025-187749

Malicious code in less-bioinformatics-ganymede-virtualreality (npm)

Malware
Nov 2025

draco-hermes-betelgeuse-auth0

npm

MAL-2025-186640

Malicious code in draco-hermes-betelgeuse-auth0 (npm)

Malware
Nov 2025

throw-omega-catch-hot-sanitize

npm

MAL-2025-189928

Malicious code in throw-omega-catch-hot-sanitize (npm)

Malware
Nov 2025

link-theta-float-class-balance

npm

MAL-2025-187797

Malicious code in link-theta-float-class-balance (npm)

Malware
Nov 2025

standard-kuiperbelt-neuromorphic-sedimentology

npm

MAL-2025-189648

Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm)

Malware
Nov 2025

foundation-await-pavo-chariklo

npm

MAL-2025-187039

Malicious code in foundation-await-pavo-chariklo (npm)

Malware
Nov 2025

phoebe-sagitta-cosmiconfig-got

npm

MAL-2025-188676

Malicious code in phoebe-sagitta-cosmiconfig-got (npm)

Malware
Nov 2025

deneb-iota-xenos-celeste

npm

MAL-2025-186546

Malicious code in deneb-iota-xenos-celeste (npm)

Malware
Nov 2025

boson-style-loader-less-loader-superflare

npm

MAL-2025-185905

Malicious code in boson-style-loader-less-loader-superflare (npm)

Malware
Nov 2025

kappa-awk-deploy-simulate-encrypt

npm

MAL-2025-187653

Malicious code in kappa-awk-deploy-simulate-encrypt (npm)

Malware
Nov 2025

nuxtjs-steganography-dynamo-rocket

npm

MAL-2025-188376

Malicious code in nuxtjs-steganography-dynamo-rocket (npm)

Malware
Nov 2025

schema-wasat-development-bellatrix

npm

MAL-2025-189376

Malicious code in schema-wasat-development-bellatrix (npm)

Malware
Nov 2025

mechatronics-deneb-bunyan-radiant

npm

MAL-2025-187961

Malicious code in mechatronics-deneb-bunyan-radiant (npm)

Malware
Nov 2025

sedna-nova-readable-levels

npm

MAL-2025-189415

Malicious code in sedna-nova-readable-levels (npm)

Malware
Nov 2025

archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy

npm

MAL-2025-185522

Malicious code in archaeoastronomy-prettier-plugin-markdown-backend-archaeoastronomy (npm)

Malware
Nov 2025

stream-ichnology-plutology-hermes

npm

MAL-2025-189683

Malicious code in stream-ichnology-plutology-hermes (npm)

Malware
Nov 2025

scale-compress-minify-wind-interface

npm

MAL-2025-189367

Malicious code in scale-compress-minify-wind-interface (npm)

Malware
Nov 2025

helmet-geochronology-rigel-sails

npm

MAL-2025-187323

Malicious code in helmet-geochronology-rigel-sails (npm)

Malware
Nov 2025

kaus-atlas-aurora-promise

npm

MAL-2025-187674

Malicious code in kaus-atlas-aurora-promise (npm)

Malware
Nov 2025

juno-areology-dorado-webdriver-mocha

npm

MAL-2025-187632

Malicious code in juno-areology-dorado-webdriver-mocha (npm)

Malware
Nov 2025
Showing 20281 - 20304 of 223,942
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001