Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,336
Total Incidents

apollo-slides-duplex-fornax

npm

MAL-2025-185508

Malicious code in apollo-slides-duplex-fornax (npm)

Malware
Nov 2025

astro-helios-nightwatch-sagitta

npm

MAL-2025-185585

Malicious code in astro-helios-nightwatch-sagitta (npm)

Malware
Nov 2025

sed-sed-link-data-root

npm

MAL-2025-189404

Malicious code in sed-sed-link-data-root (npm)

Malware
Nov 2025

changelog-archaeogenetics-mini-css-extract-plugin-dotenv

npm

MAL-2025-186107

Malicious code in changelog-archaeogenetics-mini-css-extract-plugin-dotenv (npm)

Malware
Nov 2025

config-regulus-auth-ophiuchus

npm

MAL-2025-186280

Malicious code in config-regulus-auth-ophiuchus (npm)

Malware
Nov 2025

miranda-leda-polaris-umbriel

npm

MAL-2025-188076

Malicious code in miranda-leda-polaris-umbriel (npm)

Malware
Nov 2025

zenobia-rate-limiter-cosmos-csrf

npm

MAL-2025-190455

Malicious code in zenobia-rate-limiter-cosmos-csrf (npm)

Malware
Nov 2025

quantum-norma-canopus-dotenv-parse-variables

npm

MAL-2025-189004

Malicious code in quantum-norma-canopus-dotenv-parse-variables (npm)

Malware
Nov 2025

mysql-heka-version-saturnology

npm

MAL-2025-188161

Malicious code in mysql-heka-version-saturnology (npm)

Malware
Nov 2025

mdx-hyperion-taurus-antimatter

npm

MAL-2025-187953

Malicious code in mdx-hyperion-taurus-antimatter (npm)

Malware
Nov 2025

pipe-grid-byte-old-array

npm

MAL-2025-188720

Malicious code in pipe-grid-byte-old-array (npm)

Malware
Nov 2025

lint-loop-playwright-publish

npm

MAL-2025-187808

Malicious code in lint-loop-playwright-publish (npm)

Malware
Nov 2025

init-publish-boson-apex

npm

MAL-2025-187479

Malicious code in init-publish-boson-apex (npm)

Malware
Nov 2025

hexo-steganography-cli-standard

npm

MAL-2025-187357

Malicious code in hexo-steganography-cli-standard (npm)

Malware
Nov 2025

saturnology-webdriver-mocha-registry-blitz

npm

MAL-2025-189366

Malicious code in saturnology-webdriver-mocha-registry-blitz (npm)

Malware
Nov 2025

cosmicweb-miranda-xerxes-uglify-js

npm

MAL-2025-186343

Malicious code in cosmicweb-miranda-xerxes-uglify-js (npm)

Malware
Nov 2025

promise-dynamo-umbriel-jwt

npm

MAL-2025-188857

Malicious code in promise-dynamo-umbriel-jwt (npm)

Malware
Nov 2025

radiometric-stratigraphy-nodemon-start

npm

MAL-2025-189073

Malicious code in radiometric-stratigraphy-nodemon-start (npm)

Malware
Nov 2025

hawkingradiation-sadr-buffer-heliophysics

npm

MAL-2025-187297

Malicious code in hawkingradiation-sadr-buffer-heliophysics (npm)

Malware
Nov 2025

aether-radiometric-sedna-phoebe

npm

MAL-2025-185396

Malicious code in aether-radiometric-sedna-phoebe (npm)

Malware
Nov 2025

build-eleventy-deneb-gemini

npm

MAL-2025-185925

Malicious code in build-eleventy-deneb-gemini (npm)

Malware
Nov 2025

deimos-redshift-plutology-google

npm

MAL-2025-186520

Malicious code in deimos-redshift-plutology-google (npm)

Malware
Nov 2025

vortex-enceladus-slides-xanthus

npm

MAL-2025-190186

Malicious code in vortex-enceladus-slides-xanthus (npm)

Malware
Nov 2025

config-event-install-lacerta

npm

MAL-2025-186277

Malicious code in config-event-install-lacerta (npm)

Malware
Nov 2025
Showing 24673 - 24696 of 241,336
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001