Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,336
Total Incidents

ini-koa-adonis-astrometry

npm

MAL-2025-187471

Malicious code in ini-koa-adonis-astrometry (npm)

Malware
Nov 2025

bad-info-encrypt-boolean-simple

npm

MAL-2025-185734

Malicious code in bad-info-encrypt-boolean-simple (npm)

Malware
Nov 2025

weywot-wezen-bootes-nodemon

npm

MAL-2025-190308

Malicious code in weywot-wezen-bootes-nodemon (npm)

Malware
Nov 2025

warp-hyperion-quasar-quark

npm

MAL-2025-190222

Malicious code in warp-hyperion-quasar-quark (npm)

Malware
Nov 2025

authenticate-scale-analyze-book-scale

npm

MAL-2025-185671

Malicious code in authenticate-scale-analyze-book-scale (npm)

Malware
Nov 2025

europa-polaris-terraforming-cz-conventional-changelog

npm

MAL-2025-186871

Malicious code in europa-polaris-terraforming-cz-conventional-changelog (npm)

Malware
Nov 2025

astrochemistry-rigel-csrf-cosmicweb

npm

MAL-2025-185597

Malicious code in astrochemistry-rigel-csrf-cosmicweb (npm)

Malware
Nov 2025

cassini-halley-jekyll-less

npm

MAL-2025-186011

Malicious code in cassini-halley-jekyll-less (npm)

Malware
Nov 2025

style-loader-lint-commitlint-config-angular-bootstrap

npm

MAL-2025-189706

Malicious code in style-loader-lint-commitlint-config-angular-bootstrap (npm)

Malware
Nov 2025

upsilon-decode-long-socket-final

npm

MAL-2025-190091

Malicious code in upsilon-decode-long-socket-final (npm)

Malware
Nov 2025

passport-semantic-ui-miranda-dotenv-safe

npm

MAL-2025-188582

Malicious code in passport-semantic-ui-miranda-dotenv-safe (npm)

Malware
Nov 2025

wind-phi-pi-zeta-virtualize

npm

MAL-2025-190324

Malicious code in wind-phi-pi-zeta-virtualize (npm)

Malware
Nov 2025

dione-kastra-public-react-bootstrap

npm

MAL-2025-186587

Malicious code in dione-kastra-public-react-bootstrap (npm)

Malware
Nov 2025

thread-monitor-async-omicron-optimize

npm

MAL-2025-189921

Malicious code in thread-monitor-async-omicron-optimize (npm)

Malware
Nov 2025

postgres-soap-apex-vortex

npm

MAL-2025-188793

Malicious code in postgres-soap-apex-vortex (npm)

Malware
Nov 2025

iota-release-it-stream-xenos

npm

MAL-2025-187542

Malicious code in iota-release-it-stream-xenos (npm)

Malware
Nov 2025

root-user-await-validate-iota

npm

MAL-2025-189283

Malicious code in root-user-await-validate-iota (npm)

Malware
Nov 2025

cloud-water-old-moon-wind

npm

MAL-2025-186176

Malicious code in cloud-water-old-moon-wind (npm)

Malware
Nov 2025

astroinformatics-accretion-dysonswarm-mocha

npm

MAL-2025-185599

Malicious code in astroinformatics-accretion-dysonswarm-mocha (npm)

Malware
Nov 2025

global-eridanus-yakutsk-prompts

npm

MAL-2025-187180

Malicious code in global-eridanus-yakutsk-prompts (npm)

Malware
Nov 2025

phenomic-resolvers-node-config-postgres

npm

MAL-2025-188659

Malicious code in phenomic-resolvers-node-config-postgres (npm)

Malware
Nov 2025

gemini-query-adonis-request

npm

MAL-2025-187143

Malicious code in gemini-query-adonis-request (npm)

Malware
Nov 2025

holography-commitlint-xml-unuk

npm

MAL-2025-187366

Malicious code in holography-commitlint-xml-unuk (npm)

Malware
Nov 2025

dagda-pulsar-redshift-remark

npm

MAL-2025-186474

Malicious code in dagda-pulsar-redshift-remark (npm)

Malware
Nov 2025
Showing 24529 - 24552 of 241,336
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001