Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,336
Total Incidents

cloud-water-old-moon-wind

npm

MAL-2025-186176

Malicious code in cloud-water-old-moon-wind (npm)

Malware
Nov 2025

technosignature-eslint-plugin-deimos-stop

npm

MAL-2025-189838

Malicious code in technosignature-eslint-plugin-deimos-stop (npm)

Malware
Nov 2025

biogeochemistry-xenos-nashira-petrology

npm

MAL-2025-185812

Malicious code in biogeochemistry-xenos-nashira-petrology (npm)

Malware
Nov 2025

config-ophiuchus-levels-version

npm

MAL-2025-186278

Malicious code in config-ophiuchus-levels-version (npm)

Malware
Nov 2025

buffer-mocha-astrophysics-technosignature

npm

MAL-2025-185922

Malicious code in buffer-mocha-astrophysics-technosignature (npm)

Malware
Nov 2025

hugo-wavefunction-dotenv-parse-variables-parallax

npm

MAL-2025-187389

Malicious code in hugo-wavefunction-dotenv-parse-variables-parallax (npm)

Malware
Nov 2025

phenomic-metalsmith-neptune-fornax

npm

MAL-2025-188656

Malicious code in phenomic-metalsmith-neptune-fornax (npm)

Malware
Nov 2025

configstore-mongoose-interferometry-terser-webpack-plugin

npm

MAL-2025-186287

Malicious code in configstore-mongoose-interferometry-terser-webpack-plugin (npm)

Malware
Nov 2025

bunyan-titan-sadr-loop

npm

MAL-2025-185953

Malicious code in bunyan-titan-sadr-loop (npm)

Malware
Nov 2025

octans-yakutsk-dotenv-leda

npm

MAL-2025-188394

Malicious code in octans-yakutsk-dotenv-leda (npm)

Malware
Nov 2025

vega-joviology-vega-bellatrix

npm

MAL-2025-190133

Malicious code in vega-joviology-vega-bellatrix (npm)

Malware
Nov 2025

jabbah-colors-parsec-chromedriver

npm

MAL-2025-187561

Malicious code in jabbah-colors-parsec-chromedriver (npm)

Malware
Nov 2025

astroinformatics-brane-firebase-socketio

npm

MAL-2025-185600

Malicious code in astroinformatics-brane-firebase-socketio (npm)

Malware
Nov 2025

arcturus-magellan-bellatrix-quasarjet

npm

MAL-2025-185545

Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

Malware
Nov 2025

pyxis-alphard-event-html-webpack-plugin

npm

MAL-2025-188986

Malicious code in pyxis-alphard-event-html-webpack-plugin (npm)

Malware
Nov 2025

emulate-sudo-query-balance-air

npm

MAL-2025-186725

Malicious code in emulate-sudo-query-balance-air (npm)

Malware
Nov 2025

betelgeuse-octans-aether-less

npm

MAL-2025-185796

Malicious code in betelgeuse-octans-aether-less (npm)

Malware
Nov 2025

tool-pino-xenos-rollup

npm

MAL-2025-189957

Malicious code in tool-pino-xenos-rollup (npm)

Malware
Nov 2025

virtualreality-algol-loglevel-nebula

npm

MAL-2025-190165

Malicious code in virtualreality-algol-loglevel-nebula (npm)

Malware
Nov 2025

ganymede-pegasus-xenobiology-pino

npm

MAL-2025-187108

Malicious code in ganymede-pegasus-xenobiology-pino (npm)

Malware
Nov 2025

inquirer-stream-metabolomics-uninstall

npm

MAL-2025-187491

Malicious code in inquirer-stream-metabolomics-uninstall (npm)

Malware
Nov 2025

vulcan-quasar-prettier-europa

npm

MAL-2025-190207

Malicious code in vulcan-quasar-prettier-europa (npm)

Malware
Nov 2025

delphinus-tool-sync-geckodriver

npm

MAL-2025-186530

Malicious code in delphinus-tool-sync-geckodriver (npm)

Malware
Nov 2025

cross-env-cross-env-photon-superposition

npm

MAL-2025-186379

Malicious code in cross-env-cross-env-photon-superposition (npm)

Malware
Nov 2025
Showing 24337 - 24360 of 241,336
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001