Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

223,966
Total Incidents

upsilon-fork-pi-index-emulate

npm

MAL-2025-190093

Malicious code in upsilon-fork-pi-index-emulate (npm)

Malware
Nov 2025

mira-apex-lint-bellatrix

npm

MAL-2025-188056

Malicious code in mira-apex-lint-bellatrix (npm)

Malware
Nov 2025

cypress-phoenix-higgs-chromedriver

npm

MAL-2025-186449

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

Malware
Nov 2025

webpack-less-heliophysics-wavefunction

npm

MAL-2025-190290

Malicious code in webpack-less-heliophysics-wavefunction (npm)

Malware
Nov 2025

resolvers-gemini-abiogenesis-quantum

npm

MAL-2025-189198

Malicious code in resolvers-gemini-abiogenesis-quantum (npm)

Malware
Nov 2025

socket-easy-balance-virtualize-simple

npm

MAL-2025-189567

Malicious code in socket-easy-balance-virtualize-simple (npm)

Malware
Nov 2025

mechatronics-boson-quasarjet-wolf

npm

MAL-2025-187960

Malicious code in mechatronics-boson-quasarjet-wolf (npm)

Malware
Nov 2025

vuepress-winston-deneb-vulcan

npm

MAL-2025-190196

Malicious code in vuepress-winston-deneb-vulcan (npm)

Malware
Nov 2025

ophiuchus-blueshift-virtualreality-acamar

npm

MAL-2025-188434

Malicious code in ophiuchus-blueshift-virtualreality-acamar (npm)

Malware
Nov 2025

pulsar-orogeny-heliophysics-morgan

npm

MAL-2025-188973

Malicious code in pulsar-orogeny-heliophysics-morgan (npm)

Malware
Nov 2025

private-dorado-grunt-jupiter

npm

MAL-2025-188825

Malicious code in private-dorado-grunt-jupiter (npm)

Malware
Nov 2025

prompts-radiometric-passport-geoarchaeology

npm

MAL-2025-188873

Malicious code in prompts-radiometric-passport-geoarchaeology (npm)

Malware
Nov 2025

catch-byte-decompress-cluster-assert

npm

MAL-2025-186037

Malicious code in catch-byte-decompress-cluster-assert (npm)

Malware
Nov 2025

lint-loop-playwright-publish

npm

MAL-2025-187808

Malicious code in lint-loop-playwright-publish (npm)

Malware
Nov 2025

nextjs-html-webpack-plugin-express-gemini

npm

MAL-2025-188264

Malicious code in nextjs-html-webpack-plugin-express-gemini (npm)

Malware
Nov 2025

hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado

npm

MAL-2025-187334

Malicious code in hercules-css-minimizer-webpack-plugin-cz-conventional-changelog-dorado (npm)

Malware
Nov 2025

pyxis-sedna-nebula-sedna

npm

MAL-2025-188991

Malicious code in pyxis-sedna-nebula-sedna (npm)

Malware
Nov 2025

antimatter-pino-celeste-dynamo

npm

MAL-2025-185483

Malicious code in antimatter-pino-celeste-dynamo (npm)

Malware
Nov 2025

geckodriver-slidev-protractor-hermes

npm

MAL-2025-187132

Malicious code in geckodriver-slidev-protractor-hermes (npm)

Malware
Nov 2025

bulma-yonder-acamar-ichnology

npm

MAL-2025-185938

Malicious code in bulma-yonder-acamar-ichnology (npm)

Malware
Nov 2025

encrypt-bundle-test-deploy-scale

npm

MAL-2025-186742

Malicious code in encrypt-bundle-test-deploy-scale (npm)

Malware
Nov 2025

sudo-emulate-stack-deploy-psi

npm

MAL-2025-189728

Malicious code in sudo-emulate-stack-deploy-psi (npm)

Malware
Nov 2025

sedimentology-ablation-meteor-xml

npm

MAL-2025-189408

Malicious code in sedimentology-ablation-meteor-xml (npm)

Malware
Nov 2025

mocha-eventhoriz-wavefunction-redshift

npm

MAL-2025-188088

Malicious code in mocha-eventhoriz-wavefunction-redshift (npm)

Malware
Nov 2025
Showing 20929 - 20952 of 223,966
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001