Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

229,036
Total Incidents

ganymede-webdriver-manager-convict-equinox

npm

MAL-2025-187117

Malicious code in ganymede-webdriver-manager-convict-equinox (npm)

Malware
Nov 2025

pipe-virgo-perseus-auth

npm

MAL-2025-188727

Malicious code in pipe-virgo-perseus-auth (npm)

Malware
Nov 2025

telesto-redis-ophiuchus-radioastronomy

npm

MAL-2025-189857

Malicious code in telesto-redis-ophiuchus-radioastronomy (npm)

Malware
Nov 2025

uglify-view-stub-simulate-short

npm

MAL-2025-190028

Malicious code in uglify-view-stub-simulate-short (npm)

Malware
Nov 2025

dactyl-phoenix-rest-gulp

npm

MAL-2025-186461

Malicious code in dactyl-phoenix-rest-gulp (npm)

Malware
Nov 2025

sails-dotenv-adonis-antd

npm

MAL-2025-189328

Malicious code in sails-dotenv-adonis-antd (npm)

Malware
Nov 2025

exec-radiometric-aether-juno

npm

MAL-2025-186891

Malicious code in exec-radiometric-aether-juno (npm)

Malware
Nov 2025

nuxtjs-test-fornax-postgres

npm

MAL-2025-188377

Malicious code in nuxtjs-test-fornax-postgres (npm)

Malware
Nov 2025

photon-sedna-hugo-palynology

npm

MAL-2025-188688

Malicious code in photon-sedna-hugo-palynology (npm)

Malware
Nov 2025

virgo-async-astrobiology-nashira

npm

MAL-2025-190155

Malicious code in virgo-async-astrobiology-nashira (npm)

Malware
Nov 2025

local-cz-conventional-changelog-cosmos-quark

npm

MAL-2025-187836

Malicious code in local-cz-conventional-changelog-cosmos-quark (npm)

Malware
Nov 2025

transpile-refactor-protected-promise-interface

npm

MAL-2025-189981

Malicious code in transpile-refactor-protected-promise-interface (npm)

Malware
Nov 2025

visualize-validate-array-hot-analyze

npm

MAL-2025-190174

Malicious code in visualize-validate-array-hot-analyze (npm)

Malware
Nov 2025

config-elara-leda-nucleosynthesis

npm

MAL-2025-186276

Malicious code in config-elara-leda-nucleosynthesis (npm)

Malware
Nov 2025

draco-quasarjet-envconfig-technocracy

npm

MAL-2025-186642

Malicious code in draco-quasarjet-envconfig-technocracy (npm)

Malware
Nov 2025

cluster-wavefunction-subduction-transhumanism

npm

MAL-2025-186190

Malicious code in cluster-wavefunction-subduction-transhumanism (npm)

Malware
Nov 2025

soap-weywot-robotics-on

npm

MAL-2025-189560

Malicious code in soap-weywot-robotics-on (npm)

Malware
Nov 2025

auth0-corvus-webdriver-mocha-chromedriver

npm

MAL-2025-185664

Malicious code in auth0-corvus-webdriver-mocha-chromedriver (npm)

Malware
Nov 2025

cors-google-mocha-prettier

npm

MAL-2025-186317

Malicious code in cors-google-mocha-prettier (npm)

Malware
Nov 2025

lyra-nebula-node-config-terser-webpack-plugin

npm

MAL-2025-187892

Malicious code in lyra-nebula-node-config-terser-webpack-plugin (npm)

Malware
Nov 2025

warn-array-container-grid-stub

npm

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

Malware
Nov 2025

buffer-css-loader-draco-sirius

npm

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

Malware
Nov 2025

xanadu-singularitarianism-fetch-fermion

npm

MAL-2025-190352

Malicious code in xanadu-singularitarianism-fetch-fermion (npm)

Malware
Nov 2025

lacerta-ceres-jwt-stream

npm

MAL-2025-187718

Malicious code in lacerta-ceres-jwt-stream (npm)

Malware
Nov 2025
Showing 9817 - 9840 of 229,036
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001