Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,032
Total Incidents

geochemistry-izar-farout-uninstall

npm

MAL-2025-187158

Malicious code in geochemistry-izar-farout-uninstall (npm)

Malware
Nov 2025

exoplanetology-link-commitlint-prosthetics

npm

MAL-2025-186913

Malicious code in exoplanetology-link-commitlint-prosthetics (npm)

Malware
Nov 2025

hyperion-sails-accretion-multiverse

npm

MAL-2025-187417

Malicious code in hyperion-sails-accretion-multiverse (npm)

Malware
Nov 2025

new-promise-compress-compress-private

npm

MAL-2025-188259

Malicious code in new-promise-compress-compress-private (npm)

Malware
Nov 2025

chalk-interferometry-telesto-ophiuchus

npm

MAL-2025-186096

Malicious code in chalk-interferometry-telesto-ophiuchus (npm)

Malware
Nov 2025

async-yonder-void-gravity

npm

MAL-2025-185634

Malicious code in async-yonder-void-gravity (npm)

Malware
Nov 2025

websockets-kinetic-janus-sedna

npm

MAL-2025-190296

Malicious code in websockets-kinetic-janus-sedna (npm)

Malware
Nov 2025

water-await-kappa-byte-minify

npm

MAL-2025-190238

Malicious code in water-await-kappa-byte-minify (npm)

Malware
Nov 2025

markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin

npm

MAL-2025-187930

Malicious code in markdown-pdf-auth-neptune-optimize-css-assets-webpack-plugin (npm)

Malware
Nov 2025

mensa-fornax-chariklo-geochemistry

npm

MAL-2025-187979

Malicious code in mensa-fornax-chariklo-geochemistry (npm)

Malware
Nov 2025

adonis-child-process-pegasus-repository

npm

MAL-2025-185384

Malicious code in adonis-child-process-pegasus-repository (npm)

Malware
Nov 2025

biosignature-spawn-slidev-envconfig

npm

MAL-2025-185834

Malicious code in biosignature-spawn-slidev-envconfig (npm)

Malware
Nov 2025

webdriver-mocha-browserify-polaris-cache

npm

MAL-2025-190269

Malicious code in webdriver-mocha-browserify-polaris-cache (npm)

Malware
Nov 2025

abiogenesis-airbnb-supernova-rollup

npm

MAL-2025-185353

Malicious code in abiogenesis-airbnb-supernova-rollup (npm)

Malware
Nov 2025

astroinformatics-ethology-venus-slidev

npm

MAL-2025-185601

Malicious code in astroinformatics-ethology-venus-slidev (npm)

Malware
Nov 2025

dorado-spectron-webdriver-spectron-cache

npm

MAL-2025-186611

Malicious code in dorado-spectron-webdriver-spectron-cache (npm)

Malware
Nov 2025

analyze-boolean-pipe-import-epsilon

npm

MAL-2025-185449

Malicious code in analyze-boolean-pipe-import-epsilon (npm)

Malware
Nov 2025

sass-loader-lepton-nebula-virgo

npm

MAL-2025-189356

Malicious code in sass-loader-lepton-nebula-virgo (npm)

Malware
Nov 2025

library-archaeoastronomy-winston-spica

npm

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

Malware
Nov 2025

arcturus-iota-auth-blaze

npm

MAL-2025-185544

Malicious code in arcturus-iota-auth-blaze (npm)

Malware
Nov 2025

nu-grid-import-chi-assert

npm

MAL-2025-188365

Malicious code in nu-grid-import-chi-assert (npm)

Malware
Nov 2025

new-optimize-async-spy-process

npm

MAL-2025-188258

Malicious code in new-optimize-async-spy-process (npm)

Malware
Nov 2025

achernar-zenith-ultra-joviology

npm

MAL-2025-185383

Malicious code in achernar-zenith-ultra-joviology (npm)

Malware
Nov 2025

html-webpack-plugin-atlas-global-lacerta

npm

MAL-2025-187372

Malicious code in html-webpack-plugin-atlas-global-lacerta (npm)

Malware
Nov 2025
Showing 25993 - 26016 of 242,032
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001