Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

228,975
Total Incidents

nightwatch-levels-lepton-phoebe

npm

MAL-2025-188288

Malicious code in nightwatch-levels-lepton-phoebe (npm)

Malware
Nov 2025

paleomagnetism-playwright-blackhole-izar

npm

MAL-2025-188529

Malicious code in paleomagnetism-playwright-blackhole-izar (npm)

Malware
Nov 2025

cressida-prettier-plugin-markdown-pulsar-stream

npm

MAL-2025-186370

Malicious code in cressida-prettier-plugin-markdown-pulsar-stream (npm)

Malware
Nov 2025

blueshift-kuiperbelt-asteroid-dendrochronology

npm

MAL-2025-185863

Malicious code in blueshift-kuiperbelt-asteroid-dendrochronology (npm)

Malware
Nov 2025

umbriel-bootstrap-polaris-comet

npm

MAL-2025-190043

Malicious code in umbriel-bootstrap-polaris-comet (npm)

Malware
Nov 2025

winston-tectonophysics-quito-luna

npm

MAL-2025-190341

Malicious code in winston-tectonophysics-quito-luna (npm)

Malware
Nov 2025

try-stub-yaml-query-awk

npm

MAL-2025-190013

Malicious code in try-stub-yaml-query-awk (npm)

Malware
Nov 2025

rest-version-library-hadron

npm

MAL-2025-189217

Malicious code in rest-version-library-hadron (npm)

Malware
Nov 2025

neptune-middleware-mongoose-neptunology

npm

MAL-2025-188223

Malicious code in neptune-middleware-mongoose-neptunology (npm)

Malware
Nov 2025

google-darkmatter-xerxes-europa

npm

MAL-2025-187195

Malicious code in google-darkmatter-xerxes-europa (npm)

Malware
Nov 2025

octans-non-blocking-repository-cosmiconfig

npm

MAL-2025-188390

Malicious code in octans-non-blocking-repository-cosmiconfig (npm)

Malware
Nov 2025

new-optimize-async-spy-process

npm

MAL-2025-188258

Malicious code in new-optimize-async-spy-process (npm)

Malware
Nov 2025

exoplanetology-grus-mdx-comet

npm

MAL-2025-186912

Malicious code in exoplanetology-grus-mdx-comet (npm)

Malware
Nov 2025

mensa-fornax-chariklo-geochemistry

npm

MAL-2025-187979

Malicious code in mensa-fornax-chariklo-geochemistry (npm)

Malware
Nov 2025

dorado-hexo-sqlite-postcss-loader

npm

MAL-2025-186606

Malicious code in dorado-hexo-sqlite-postcss-loader (npm)

Malware
Nov 2025

fusion-publish-query-auth0

npm

MAL-2025-187069

Malicious code in fusion-publish-query-auth0 (npm)

Malware
Nov 2025

vulcan-delphinus-protoplanetarydisk-gatsby

npm

MAL-2025-190205

Malicious code in vulcan-delphinus-protoplanetarydisk-gatsby (npm)

Malware
Nov 2025

kappa-notify-web-encrypt-iota

npm

MAL-2025-187659

Malicious code in kappa-notify-web-encrypt-iota (npm)

Malware
Nov 2025

optimize-double-nu-cluster-function

npm

MAL-2025-188454

Malicious code in optimize-double-nu-cluster-function (npm)

Malware
Nov 2025

water-await-kappa-byte-minify

npm

MAL-2025-190238

Malicious code in water-await-kappa-byte-minify (npm)

Malware
Nov 2025

carpo-release-it-oberon-halley

npm

MAL-2025-186009

Malicious code in carpo-release-it-oberon-halley (npm)

Malware
Nov 2025

paleontology-sublimation-europa-backend

npm

MAL-2025-188538

Malicious code in paleontology-sublimation-europa-backend (npm)

Malware
Nov 2025

carpo-hermes-firebase-nightmare

npm

MAL-2025-186006

Malicious code in carpo-hermes-firebase-nightmare (npm)

Malware
Nov 2025

abstract-interface-stub-delta-cloud

npm

MAL-2025-185367

Malicious code in abstract-interface-stub-delta-cloud (npm)

Malware
Nov 2025
Showing 9433 - 9456 of 228,975
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001