Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

229,046
Total Incidents

easy-kernel-deserialize-public-await

npm

MAL-2025-186671

Malicious code in easy-kernel-deserialize-public-await (npm)

Malware
Nov 2025

chakra-ui-fornax-umbriel-wezen

npm

MAL-2025-186088

Malicious code in chakra-ui-fornax-umbriel-wezen (npm)

Malware
Nov 2025

orogeny-algol-kastra-xo

npm

MAL-2025-188476

Malicious code in orogeny-algol-kastra-xo (npm)

Malware
Nov 2025

typeorm-warp-procyon-non-blocking

npm

MAL-2025-190020

Malicious code in typeorm-warp-procyon-non-blocking (npm)

Malware
Nov 2025

triton-subduction-gravitationalwave-sociobiology

npm

MAL-2025-190003

Malicious code in triton-subduction-gravitationalwave-sociobiology (npm)

Malware
Nov 2025

odin-fetch-arcturus-cressida

npm

MAL-2025-188397

Malicious code in odin-fetch-arcturus-cressida (npm)

Malware
Nov 2025

uglify-parse-socket-new-error

npm

MAL-2025-190027

Malicious code in uglify-parse-socket-new-error (npm)

Malware
Nov 2025

atlas-nanotechnology-polaris-meissa

npm

MAL-2025-185638

Malicious code in atlas-nanotechnology-polaris-meissa (npm)

Malware
Nov 2025

transform-semantic-ui-eleventy-phoebe

npm

MAL-2025-189969

Malicious code in transform-semantic-ui-eleventy-phoebe (npm)

Malware
Nov 2025

mutation-augmentedreality-archaeoastronomy-neutronstar

npm

MAL-2025-188150

Malicious code in mutation-augmentedreality-archaeoastronomy-neutronstar (npm)

Malware
Nov 2025

levels-eris-ora-hydra

npm

MAL-2025-187766

Malicious code in levels-eris-ora-hydra (npm)

Malware
Nov 2025

buffer-css-loader-draco-sirius

npm

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

Malware
Nov 2025

decompress-sed-sudo-index-nu

npm

MAL-2025-186505

Malicious code in decompress-sed-sudo-index-nu (npm)

Malware
Nov 2025

callisto-hyperion-dactyl-equinox

npm

MAL-2025-185989

Malicious code in callisto-hyperion-dactyl-equinox (npm)

Malware
Nov 2025

warn-array-container-grid-stub

npm

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

Malware
Nov 2025

zenith-registry-materialize-quasar

npm

MAL-2025-190448

Malicious code in zenith-registry-materialize-quasar (npm)

Malware
Nov 2025

markdown-nconf-string-xerxes

npm

MAL-2025-187928

Malicious code in markdown-nconf-string-xerxes (npm)

Malware
Nov 2025

neptune-node-sass-altair-membrane

npm

MAL-2025-188225

Malicious code in neptune-node-sass-altair-membrane (npm)

Malware
Nov 2025

cli-hermes-mesosphere-corvus

npm

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

Malware
Nov 2025

development-xerxes-dagda-repository

npm

MAL-2025-186584

Malicious code in development-xerxes-dagda-repository (npm)

Malware
Nov 2025

hapi-cross-env-subduction-mongodb

npm

MAL-2025-187274

Malicious code in hapi-cross-env-subduction-mongodb (npm)

Malware
Nov 2025

rest-neptune-style-loader-nconf

npm

MAL-2025-189212

Malicious code in rest-neptune-style-loader-nconf (npm)

Malware
Nov 2025

paleoclimatology-jsonp-troposphere-nodejs

npm

MAL-2025-188512

Malicious code in paleoclimatology-jsonp-troposphere-nodejs (npm)

Malware
Nov 2025

javascript-async-enceladus-eslint-plugin

npm

MAL-2025-187596

Malicious code in javascript-async-enceladus-eslint-plugin (npm)

Malware
Nov 2025
Showing 10177 - 10200 of 229,046
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001