Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,030
Total Incidents

joviology-heka-accretion-speleology

npm

MAL-2025-187617

Malicious code in joviology-heka-accretion-speleology (npm)

Malware
Nov 2025

upsilon-decode-catch-log-function

npm

MAL-2025-190090

Malicious code in upsilon-decode-catch-log-function (npm)

Malware
Nov 2025

load-protected-file-index-analyze

npm

MAL-2025-187831

Malicious code in load-protected-file-index-analyze (npm)

Malware
Nov 2025

neptune-webdriver-manager-vuetify-boson

npm

MAL-2025-188234

Malicious code in neptune-webdriver-manager-vuetify-boson (npm)

Malware
Nov 2025

buffer-mocha-astrophysics-technosignature

npm

MAL-2025-185922

Malicious code in buffer-mocha-astrophysics-technosignature (npm)

Malware
Nov 2025

blueshift-canopus-leda-higgs

npm

MAL-2025-185861

Malicious code in blueshift-canopus-leda-higgs (npm)

Malware
Nov 2025

jovian-development-meissa-configstore

npm

MAL-2025-187610

Malicious code in jovian-development-meissa-configstore (npm)

Malware
Nov 2025

event-biogeochemistry-blitz-eris

npm

MAL-2025-186874

Malicious code in event-biogeochemistry-blitz-eris (npm)

Malware
Nov 2025

jabbah-colors-parsec-chromedriver

npm

MAL-2025-187561

Malicious code in jabbah-colors-parsec-chromedriver (npm)

Malware
Nov 2025

duplex-init-parcel-test

npm

MAL-2025-186646

Malicious code in duplex-init-parcel-test (npm)

Malware
Nov 2025

chromedriver-jwt-paleoclimatology-archaeoastronomy

npm

MAL-2025-186150

Malicious code in chromedriver-jwt-paleoclimatology-archaeoastronomy (npm)

Malware
Nov 2025

octans-yakutsk-dotenv-leda

npm

MAL-2025-188394

Malicious code in octans-yakutsk-dotenv-leda (npm)

Malware
Nov 2025

commitlint-config-angular-sadr-cluster-mira

npm

MAL-2025-186253

Malicious code in commitlint-config-angular-sadr-cluster-mira (npm)

Malware
Nov 2025

new-transpile-alpha-log-proxy

npm

MAL-2025-188260

Malicious code in new-transpile-alpha-log-proxy (npm)

Malware
Nov 2025

xanthus-websockets-helios-duplex

npm

MAL-2025-190360

Malicious code in xanthus-websockets-helios-duplex (npm)

Malware
Nov 2025

alphard-gatsby-commitizen-node-config

npm

MAL-2025-185440

Malicious code in alphard-gatsby-commitizen-node-config (npm)

Malware
Nov 2025

callback-xanthus-astrochemistry-quantum-computing

npm

MAL-2025-185983

Malicious code in callback-xanthus-astrochemistry-quantum-computing (npm)

Malware
Nov 2025

configstore-mensa-airbnb-quark

npm

MAL-2025-186286

Malicious code in configstore-mensa-airbnb-quark (npm)

Malware
Nov 2025

docusaurus-mdx-ionosphere-fermiparadox

npm

MAL-2025-186596

Malicious code in docusaurus-mdx-ionosphere-fermiparadox (npm)

Malware
Nov 2025

arcturus-magellan-bellatrix-quasarjet

npm

MAL-2025-185545

Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

Malware
Nov 2025

meteor-envconfig-quito-singularitarianism

npm

MAL-2025-188022

Malicious code in meteor-envconfig-quito-singularitarianism (npm)

Malware
Nov 2025

markdown-pdf-draco-kuiperbelt-tethys

npm

MAL-2025-187932

Malicious code in markdown-pdf-draco-kuiperbelt-tethys (npm)

Malware
Nov 2025

emulate-sudo-query-balance-air

npm

MAL-2025-186725

Malicious code in emulate-sudo-query-balance-air (npm)

Malware
Nov 2025

leda-kaus-bellatrix-leda

npm

MAL-2025-187735

Malicious code in leda-kaus-bellatrix-leda (npm)

Malware
Nov 2025
Showing 25321 - 25344 of 242,030
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001