Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,032
Total Incidents

ophiuchus-polaris-mineralogy-proteomics

npm

MAL-2025-188442

Malicious code in ophiuchus-polaris-mineralogy-proteomics (npm)

Malware
Nov 2025

janus-remark-thuban-sails

npm

MAL-2025-187581

Malicious code in janus-remark-thuban-sails (npm)

Malware
Nov 2025

radioastronomy-holography-express-avior

npm

MAL-2025-189064

Malicious code in radioastronomy-holography-express-avior (npm)

Malware
Nov 2025

umbriel-eslint-config-kardashevscale-jwt

npm

MAL-2025-190044

Malicious code in umbriel-eslint-config-kardashevscale-jwt (npm)

Malware
Nov 2025

slides-public-alphard-canopus

npm

MAL-2025-189531

Malicious code in slides-public-alphard-canopus (npm)

Malware
Nov 2025

biosignature-jasmine-solis-promise

npm

MAL-2025-185830

Malicious code in biosignature-jasmine-solis-promise (npm)

Malware
Nov 2025

config-dactyl-foundation-sirius

npm

MAL-2025-186274

Malicious code in config-dactyl-foundation-sirius (npm)

Malware
Nov 2025

lithosphere-buffer-jwt-prettier

npm

MAL-2025-187820

Malicious code in lithosphere-buffer-jwt-prettier (npm)

Malware
Nov 2025

deimos-koa-build-figures

npm

MAL-2025-186517

Malicious code in deimos-koa-build-figures (npm)

Malware
Nov 2025

meissa-foundation-plutology-async

npm

MAL-2025-187968

Malicious code in meissa-foundation-plutology-async (npm)

Malware
Nov 2025

reject-process-link-cat-encrypt

npm

MAL-2025-189149

Malicious code in reject-process-link-cat-encrypt (npm)

Malware
Nov 2025

mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius

npm

MAL-2025-188112

Malicious code in mongoose-css-minimizer-webpack-plugin-spectroscopy-aquarius (npm)

Malware
Nov 2025

eclipse-eridanus-upgrade-registry

npm

MAL-2025-186677

Malicious code in eclipse-eridanus-upgrade-registry (npm)

Malware
Nov 2025

kardashevscale-dotenv-safe-callisto-quasarjet

npm

MAL-2025-187664

Malicious code in kardashevscale-dotenv-safe-callisto-quasarjet (npm)

Malware
Nov 2025

nightwatch-nashira-wavefunction-perturbation

npm

MAL-2025-188290

Malicious code in nightwatch-nashira-wavefunction-perturbation (npm)

Malware
Nov 2025

paleobotany-callback-magnetosphere-bellatrix

npm

MAL-2025-188498

Malicious code in paleobotany-callback-magnetosphere-bellatrix (npm)

Malware
Nov 2025

ceres-redis-umbra-terser-webpack-plugin

npm

MAL-2025-186074

Malicious code in ceres-redis-umbra-terser-webpack-plugin (npm)

Malware
Nov 2025

resolvers-semantic-ui-cosmochemistry-andromeda

npm

MAL-2025-189202

Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda (npm)

Malware
Nov 2025

registry-relay-electron-builder-vuetify

npm

MAL-2025-189131

Malicious code in registry-relay-electron-builder-vuetify (npm)

Malware
Nov 2025

nestjs-astrometry-geoarchaeology-child-process

npm

MAL-2025-188237

Malicious code in nestjs-astrometry-geoarchaeology-child-process (npm)

Malware
Nov 2025

filament-xanthus-bellatrix-phoenix

npm

MAL-2025-186974

Malicious code in filament-xanthus-bellatrix-phoenix (npm)

Malware
Nov 2025

transform-ethology-weywot-style-loader

npm

MAL-2025-189964

Malicious code in transform-ethology-weywot-style-loader (npm)

Malware
Nov 2025

decompress-deserialize-nu-new-emulate

npm

MAL-2025-186504

Malicious code in decompress-deserialize-nu-new-emulate (npm)

Malware
Nov 2025

node-config-lynx-cressida-hermes

npm

MAL-2025-188307

Malicious code in node-config-lynx-cressida-hermes (npm)

Malware
Nov 2025
Showing 26137 - 26160 of 242,032
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001