Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,336
Total Incidents

sequelize-ophiuchus-parcel-procyon

npm

MAL-2025-189445

Malicious code in sequelize-ophiuchus-parcel-procyon (npm)

Malware
Nov 2025

hugo-wavefunction-dotenv-parse-variables-parallax

npm

MAL-2025-187389

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

Malware
Nov 2025

enceladus-sirius-radioastronomy-octans

npm

MAL-2025-186738

Malicious code in enceladus-sirius-radioastronomy-octans (npm)

Malware
Nov 2025

hexo-restart-farout-sync

npm

MAL-2025-187356

Malicious code in hexo-restart-farout-sync (npm)

Malware
Nov 2025

airbnb-oscillation-commitlint-config-angular-palynology

npm

MAL-2025-185410

Malicious code in airbnb-oscillation-commitlint-config-angular-palynology (npm)

Malware
Nov 2025

local-astro-inquirer-neptune

npm

MAL-2025-187834

Malicious code in local-astro-inquirer-neptune (npm)

Malware
Nov 2025

envconfig-apollo-dependencies-update

npm

MAL-2025-186771

Malicious code in envconfig-apollo-dependencies-update (npm)

Malware
Nov 2025

secure-phi-web-yaml-socket

npm

MAL-2025-189398

Malicious code in secure-phi-web-yaml-socket (npm)

Malware
Nov 2025

resolvers-foundation-library-kastra

npm

MAL-2025-189197

Malicious code in resolvers-foundation-library-kastra (npm)

Malware
Nov 2025

prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin

npm

MAL-2025-188808

Malicious code in prettier-plugin-markdown-tool-sociobiology-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

singularity-rigel-quasarjet-husky

npm

MAL-2025-189511

Malicious code in singularity-rigel-quasarjet-husky (npm)

Malware
Nov 2025

perturbation-coronalmassejection-terser-ganymede

npm

MAL-2025-188640

Malicious code in perturbation-coronalmassejection-terser-ganymede (npm)

Malware
Nov 2025

upgrade-dysonswarm-node-config-got

npm

MAL-2025-190083

Malicious code in upgrade-dysonswarm-node-config-got (npm)

Malware
Nov 2025

paleoecology-backend-hydrogeology-postcss-loader

npm

MAL-2025-188518

Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)

Malware
Nov 2025

water-execute-rain-root-cloud

npm

MAL-2025-190242

Malicious code in water-execute-rain-root-cloud (npm)

Malware
Nov 2025

root-user-await-validate-iota

npm

MAL-2025-189283

Malicious code in root-user-await-validate-iota (npm)

Malware
Nov 2025

telesto-publish-oberon-charon

npm

MAL-2025-189856

Malicious code in telesto-publish-oberon-charon (npm)

Malware
Nov 2025

adonis-tectonophysics-tectonic-helmet

npm

MAL-2025-185388

Malicious code in adonis-tectonophysics-tectonic-helmet (npm)

Malware
Nov 2025

sequelize-phoebe-bunyan-test

npm

MAL-2025-189447

Malicious code in sequelize-phoebe-bunyan-test (npm)

Malware
Nov 2025

compile-catch-gamma-encode-resolve

npm

MAL-2025-186258

Malicious code in compile-catch-gamma-encode-resolve (npm)

Malware
Nov 2025

heka-mdx-kaus-indus

npm

MAL-2025-187306

Malicious code in heka-mdx-kaus-indus (npm)

Malware
Nov 2025

cloud-water-old-moon-wind

npm

MAL-2025-186176

Malicious code in cloud-water-old-moon-wind (npm)

Malware
Nov 2025

gemini-query-adonis-request

npm

MAL-2025-187143

Malicious code in gemini-query-adonis-request (npm)

Malware
Nov 2025

star-earth-small-execute-decrypt

npm

MAL-2025-189653

Malicious code in star-earth-small-execute-decrypt (npm)

Malware
Nov 2025
Showing 24289 - 24312 of 241,336
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001