Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,032
Total Incidents

kuiperbelt-yakutsk-bioinformatics-express

npm

MAL-2025-187714

Malicious code in kuiperbelt-yakutsk-bioinformatics-express (npm)

Malware
Nov 2025

accretion-kastra-nightmare-module

npm

MAL-2025-185378

Malicious code in accretion-kastra-nightmare-module (npm)

Malware
Nov 2025

child-process-charon-mui-on

npm

MAL-2025-186142

Malicious code in child-process-charon-mui-on (npm)

Malware
Nov 2025

library-archaeoastronomy-winston-spica

npm

MAL-2025-187772

Malicious code in library-archaeoastronomy-winston-spica (npm)

Malware
Nov 2025

gacrux-magellan-cluster-version

npm

MAL-2025-187084

Malicious code in gacrux-magellan-cluster-version (npm)

Malware
Nov 2025

capella-non-blocking-avior-jabbah

npm

MAL-2025-185999

Malicious code in capella-non-blocking-avior-jabbah (npm)

Malware
Nov 2025

decompress-deserialize-nu-new-emulate

npm

MAL-2025-186504

Malicious code in decompress-deserialize-nu-new-emulate (npm)

Malware
Nov 2025

cressida-jwt-loglevel-fetch

npm

MAL-2025-186369

Malicious code in cressida-jwt-loglevel-fetch (npm)

Malware
Nov 2025

backend-nashira-rate-limiter-chromedriver

npm

MAL-2025-185728

Malicious code in backend-nashira-rate-limiter-chromedriver (npm)

Malware
Nov 2025

impulse-sedna-sedna-cryovolcano

npm

MAL-2025-187447

Malicious code in impulse-sedna-sedna-cryovolcano (npm)

Malware
Nov 2025

superflare-xenon-semantic-ui-fermiparadox

npm

MAL-2025-189758

Malicious code in superflare-xenon-semantic-ui-fermiparadox (npm)

Malware
Nov 2025

meteor-dysonswarm-geckodriver-grus

npm

MAL-2025-188021

Malicious code in meteor-dysonswarm-geckodriver-grus (npm)

Malware
Nov 2025

ceres-redis-umbra-terser-webpack-plugin

npm

MAL-2025-186074

Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

Malware
Nov 2025

ganymede-sass-loader-dagda-husky

npm

MAL-2025-187111

Malicious code in ganymede-sass-loader-dagda-husky (npm)

Malware
Nov 2025

supernova-astrophysics-jekyll-webdriver-manager

npm

MAL-2025-189761

Malicious code in supernova-astrophysics-jekyll-webdriver-manager (npm)

Malware
Nov 2025

pulsar-puppeteer-dagda-cosmology

npm

MAL-2025-188975

Malicious code in pulsar-puppeteer-dagda-cosmology (npm)

Malware
Nov 2025

optimize-theta-process-cluster-dog

npm

MAL-2025-188458

Malicious code in optimize-theta-process-cluster-dog (npm)

Malware
Nov 2025

test-cache-rehype-backend

npm

MAL-2025-189881

Malicious code in test-cache-rehype-backend (npm)

Malware
Nov 2025

eslint-plugin-mutation-geomorphology-cladistics

npm

MAL-2025-186846

Malicious code in eslint-plugin-mutation-geomorphology-cladistics (npm)

Malware
Nov 2025

relay-tardigrade-typeorm-cli

npm

MAL-2025-189158

Malicious code in relay-tardigrade-typeorm-cli (npm)

Malware
Nov 2025

byte-log-float-cold-analyze

npm

MAL-2025-185956

Malicious code in byte-log-float-cold-analyze (npm)

Malware
Nov 2025

centaurus-biohacking-mongoose-nova

npm

MAL-2025-186059

Malicious code in centaurus-biohacking-mongoose-nova (npm)

Malware
Nov 2025

electron-tool-nashira-gemini

npm

MAL-2025-186706

Malicious code in electron-tool-nashira-gemini (npm)

Malware
Nov 2025

blaze-transport-eridanus-singularitarianism

npm

MAL-2025-185854

Malicious code in blaze-transport-eridanus-singularitarianism (npm)

Malware
Nov 2025
Showing 26065 - 26088 of 242,032
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001