Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,030
Total Incidents

csrf-mutation-oauth-convict

npm

MAL-2025-186411

Malicious code in csrf-mutation-oauth-convict (npm)

Malware
Nov 2025

proxima-nightmare-postgres-seismology

npm

MAL-2025-188916

Malicious code in proxima-nightmare-postgres-seismology (npm)

Malware
Nov 2025

markdown-paleontology-antares-quantum

npm

MAL-2025-187929

Malicious code in markdown-paleontology-antares-quantum (npm)

Malware
Nov 2025

java-orchestrate-awk-process-virtualize

npm

MAL-2025-187591

Malicious code in java-orchestrate-awk-process-virtualize (npm)

Malware
Nov 2025

mysql-enceladus-cressida-whitedwarf

npm

MAL-2025-188159

Malicious code in mysql-enceladus-cressida-whitedwarf (npm)

Malware
Nov 2025

futurology-taurus-celeste-css-loader

npm

MAL-2025-187078

Malicious code in futurology-taurus-celeste-css-loader (npm)

Malware
Nov 2025

materialize-cache-neptune-cosmogenic

npm

MAL-2025-187940

Malicious code in materialize-cache-neptune-cosmogenic (npm)

Malware
Nov 2025

cordelia-babel-on-proxima

npm

MAL-2025-186304

Malicious code in cordelia-babel-on-proxima (npm)

Malware
Nov 2025

sedna-enif-fusion-colors

npm

MAL-2025-189410

Malicious code in sedna-enif-fusion-colors (npm)

Malware
Nov 2025

despina-lightyear-yakutsk-jwt

npm

MAL-2025-186568

Malicious code in despina-lightyear-yakutsk-jwt (npm)

Malware
Nov 2025

janus-chai-umbriel-install

npm

MAL-2025-187568

Malicious code in janus-chai-umbriel-install (npm)

Malware
Nov 2025

foundation-node-config-farout-bunyan

npm

MAL-2025-187040

Malicious code in foundation-node-config-farout-bunyan (npm)

Malware
Nov 2025

io-publish-antd-outercore

npm

MAL-2025-187524

Malicious code in io-publish-antd-outercore (npm)

Malware
Nov 2025

javascript-css-minimizer-webpack-plugin-geochronology-foundation

npm

MAL-2025-187597

Malicious code in javascript-css-minimizer-webpack-plugin-geochronology-foundation (npm)

Malware
Nov 2025

mysql-local-bootes-triton

npm

MAL-2025-188163

Malicious code in mysql-local-bootes-triton (npm)

Malware
Nov 2025

nightmare-mesosphere-iota-dotenv

npm

MAL-2025-188275

Malicious code in nightmare-mesosphere-iota-dotenv (npm)

Malware
Nov 2025

mini-css-extract-plugin-meissa-chai-ganymede

npm

MAL-2025-188047

Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

Malware
Nov 2025

lithosphere-inflation-antimatter-europa

npm

MAL-2025-187823

Malicious code in lithosphere-inflation-antimatter-europa (npm)

Malware
Nov 2025

rimraf-jupiter-carpo-phylogenetics

npm

MAL-2025-189244

Malicious code in rimraf-jupiter-carpo-phylogenetics (npm)

Malware
Nov 2025

xanthus-fusion-oauth-halley

npm

MAL-2025-190356

Malicious code in xanthus-fusion-oauth-halley (npm)

Malware
Nov 2025

fomalhaut-restart-loglevel-forever

npm

MAL-2025-187007

Malicious code in fomalhaut-restart-loglevel-forever (npm)

Malware
Nov 2025

vega-xerxes-meissa-chalk

npm

MAL-2025-190136

Malicious code in vega-xerxes-meissa-chalk (npm)

Malware
Nov 2025

blazar-apollo-async-barnard

npm

MAL-2025-185845

Malicious code in blazar-apollo-async-barnard (npm)

Malware
Nov 2025

string-crust-exoplanet-centauri

npm

MAL-2025-189694

Malicious code in string-crust-exoplanet-centauri (npm)

Malware
Nov 2025
Showing 25009 - 25032 of 242,030
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001