Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

242,032
Total Incidents

gemini-ionosphere-superposition-package

npm

MAL-2025-187140

Malicious code in gemini-ionosphere-superposition-package (npm)

Malware
Nov 2025

configstore-centaurus-writable-express

npm

MAL-2025-186282

Malicious code in configstore-centaurus-writable-express (npm)

Malware
Nov 2025

pegasus-parcel-gravity-cassini

npm

MAL-2025-188601

Malicious code in pegasus-parcel-gravity-cassini (npm)

Malware
Nov 2025

norma-tool-stratigraphy-stop

npm

MAL-2025-188344

Malicious code in norma-tool-stratigraphy-stop (npm)

Malware
Nov 2025

redgiant-heliophysics-protoplanetarydisk-prettier-stylelint

npm

MAL-2025-189102

Malicious code in redgiant-heliophysics-protoplanetarydisk-prettier-stylelint (npm)

Malware
Nov 2025

json-apollo-rate-limiter-cross-env

npm

MAL-2025-187622

Malicious code in json-apollo-rate-limiter-cross-env (npm)

Malware
Nov 2025

corvus-vuepress-concurrently-elara

npm

MAL-2025-186326

Malicious code in corvus-vuepress-concurrently-elara (npm)

Malware
Nov 2025

draco-terser-webpack-plugin-hermes-corvus

npm

MAL-2025-186643

Malicious code in draco-terser-webpack-plugin-hermes-corvus (npm)

Malware
Nov 2025

nuxtjs-fomalhaut-postcss-avior

npm

MAL-2025-188371

Malicious code in nuxtjs-fomalhaut-postcss-avior (npm)

Malware
Nov 2025

view-warn-bash-rain-old

npm

MAL-2025-190152

Malicious code in view-warn-bash-rain-old (npm)

Malware
Nov 2025

compress-water-cluster-slow-cat

npm

MAL-2025-186264

Malicious code in compress-water-cluster-slow-cat (npm)

Malware
Nov 2025

paleoclimatology-nova-rollup-vortex

npm

MAL-2025-188514

Malicious code in paleoclimatology-nova-rollup-vortex (npm)

Malware
Nov 2025

perseus-hermes-polaris-event

npm

MAL-2025-188626

Malicious code in perseus-hermes-polaris-event (npm)

Malware
Nov 2025

build-perseus-repository-asteroid

npm

MAL-2025-185931

Malicious code in build-perseus-repository-asteroid (npm)

Malware
Nov 2025

taphonomy-commitlint-kardashevscale-loglevel

npm

MAL-2025-189804

Malicious code in taphonomy-commitlint-kardashevscale-loglevel (npm)

Malware
Nov 2025

axios-neutrino-fomalhaut-perturbation

npm

MAL-2025-185715

Malicious code in axios-neutrino-fomalhaut-perturbation (npm)

Malware
Nov 2025

chakra-ui-sadr-yaml-less-loader

npm

MAL-2025-186091

Malicious code in chakra-ui-sadr-yaml-less-loader (npm)

Malware
Nov 2025

module-biomimicry-rollup-comet

npm

MAL-2025-188098

Malicious code in module-biomimicry-rollup-comet (npm)

Malware
Nov 2025

wasat-rimraf-csrf-halley

npm

MAL-2025-190236

Malicious code in wasat-rimraf-csrf-halley (npm)

Malware
Nov 2025

joviology-betelgeuse-saturnology-webdriverio

npm

MAL-2025-187615

Malicious code in joviology-betelgeuse-saturnology-webdriverio (npm)

Malware
Nov 2025

await-lacerta-ganymede-commitizen

npm

MAL-2025-185696

Malicious code in await-lacerta-ganymede-commitizen (npm)

Malware
Nov 2025

import-scale-deserialize-sudo-visualize

npm

MAL-2025-187439

Malicious code in import-scale-deserialize-sudo-visualize (npm)

Malware
Nov 2025

cosmicweb-sedimentology-ignite-library

npm

MAL-2025-186344

Malicious code in cosmicweb-sedimentology-ignite-library (npm)

Malware
Nov 2025

bulma-titan-axios-ariel

npm

MAL-2025-185937

Malicious code in bulma-titan-axios-ariel (npm)

Malware
Nov 2025
Showing 26833 - 26856 of 242,032
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001