Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,018
Total Incidents

sirius-darkmatter-lint-staged-cli

npm

MAL-2025-189515

Malicious code in sirius-darkmatter-lint-staged-cli (npm)

Malware
Nov 2025

webdriverio-less-loader-relay-venus

npm

MAL-2025-190279

Malicious code in webdriverio-less-loader-relay-venus (npm)

Malware
Nov 2025

throw-bad-orchestrate-analyze-cat

npm

MAL-2025-189925

Malicious code in throw-bad-orchestrate-analyze-cat (npm)

Malware
Nov 2025

envconfig-dotenv-safe-middleware-javascript

npm

MAL-2025-186772

Malicious code in envconfig-dotenv-safe-middleware-javascript (npm)

Malware
Nov 2025

stream-sequelize-writable-local

npm

MAL-2025-189688

Malicious code in stream-sequelize-writable-local (npm)

Malware
Nov 2025

cordelia-babel-on-proxima

npm

MAL-2025-186304

Malicious code in cordelia-babel-on-proxima (npm)

Malware
Nov 2025

foundation-node-config-farout-bunyan

npm

MAL-2025-187040

Malicious code in foundation-node-config-farout-bunyan (npm)

Malware
Nov 2025

firebase-helios-bionics-virtualreality

npm

MAL-2025-186990

Malicious code in firebase-helios-bionics-virtualreality (npm)

Malware
Nov 2025

neptune-barnard-mdx-less-loader

npm

MAL-2025-188212

Malicious code in neptune-barnard-mdx-less-loader (npm)

Malware
Nov 2025

beta-moon-fast-authorize-deploy

npm

MAL-2025-185783

Malicious code in beta-moon-fast-authorize-deploy (npm)

Malware
Nov 2025

mira-fusion-yildun-css-loader

npm

MAL-2025-188058

Malicious code in mira-fusion-yildun-css-loader (npm)

Malware
Nov 2025

mysql-local-bootes-triton

npm

MAL-2025-188163

Malicious code in mysql-local-bootes-triton (npm)

Malware
Nov 2025

joviology-exobiology-antares-webpack

npm

MAL-2025-187616

Malicious code in joviology-exobiology-antares-webpack (npm)

Malware
Nov 2025

despina-lightyear-yakutsk-jwt

npm

MAL-2025-186568

Malicious code in despina-lightyear-yakutsk-jwt (npm)

Malware
Nov 2025

nightmare-mesosphere-iota-dotenv

npm

MAL-2025-188275

Malicious code in nightmare-mesosphere-iota-dotenv (npm)

Malware
Nov 2025

wormhole-gammarayburst-nanotechnology-umbriel

npm

MAL-2025-190344

Malicious code in wormhole-gammarayburst-nanotechnology-umbriel (npm)

Malware
Nov 2025

javascript-css-minimizer-webpack-plugin-geochronology-foundation

npm

MAL-2025-187597

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm)

Malware
Nov 2025

got-paleoclimatology-nebula-commitizen

npm

MAL-2025-187203

Malicious code in got-paleoclimatology-nebula-commitizen (npm)

Malware
Nov 2025

mini-css-extract-plugin-meissa-chai-ganymede

npm

MAL-2025-188047

Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

Malware
Nov 2025

koa-vega-zenith-canopus

npm

MAL-2025-187702

Malicious code in koa-vega-zenith-canopus (npm)

Malware
Nov 2025

express-cors-dysonswarm-async

npm

MAL-2025-186927

Malicious code in express-cors-dysonswarm-async (npm)

Malware
Nov 2025

rimraf-jupiter-carpo-phylogenetics

npm

MAL-2025-189244

Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)

Malware
Nov 2025

xanthus-websockets-helios-duplex

npm

MAL-2025-190360

Malicious code in xanthus-websockets-helios-duplex (npm)

Malware
Nov 2025

upsilon-decode-catch-log-function

npm

MAL-2025-190090

Malicious code in upsilon-decode-catch-log-function (npm)

Malware
Nov 2025
Showing 24985 - 25008 of 242,018
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001