Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

229,046
Total Incidents

webdriver-mocha-apollo-server-shelljs

npm

MAL-2025-190268

Malicious code in webdriver-mocha-apollo-server-shelljs (npm)

Malware
Nov 2025

nebula-gulp-bootes-kastra

npm

MAL-2025-188205

Malicious code in nebula-gulp-bootes-kastra (npm)

Malware
Nov 2025

less-geckodriver-mongodb-nodejs

npm

MAL-2025-187752

Malicious code in less-geckodriver-mongodb-nodejs (npm)

Malware
Nov 2025

archaeogenetics-taphonomy-blazar-singularitarianism

npm

MAL-2025-185527

Malicious code in archaeogenetics-taphonomy-blazar-singularitarianism (npm)

Malware
Nov 2025

draco-quasarjet-envconfig-technocracy

npm

MAL-2025-186642

Malicious code in draco-quasarjet-envconfig-technocracy (npm)

Malware
Nov 2025

comet-axios-chakra-ui-ora

npm

MAL-2025-186213

Malicious code in comet-axios-chakra-ui-ora (npm)

Malware
Nov 2025

sigma-compile-simulate-integer-bash

npm

MAL-2025-189487

Malicious code in sigma-compile-simulate-integer-bash (npm)

Malware
Nov 2025

procyon-slidev-process-webpack

npm

MAL-2025-188849

Malicious code in procyon-slidev-process-webpack (npm)

Malware
Nov 2025

ganymede-metabolomics-cryptography-metalsmith

npm

MAL-2025-187104

Malicious code in ganymede-metabolomics-cryptography-metalsmith (npm)

Malware
Nov 2025

phenomic-avior-greatfilter-boson

npm

MAL-2025-188650

Malicious code in phenomic-avior-greatfilter-boson (npm)

Malware
Nov 2025

miranda-native-cross-env-oauth

npm

MAL-2025-188080

Malicious code in miranda-native-cross-env-oauth (npm)

Malware
Nov 2025

release-it-materialize-quasarjet-perturbation

npm

MAL-2025-189166

Malicious code in release-it-materialize-quasarjet-perturbation (npm)

Malware
Nov 2025

warn-array-container-grid-stub

npm

MAL-2025-190210

Malicious code in warn-array-container-grid-stub (npm)

Malware
Nov 2025

archaeoastronomy-lint-staged-polaris-dynamo

npm

MAL-2025-185521

Malicious code in archaeoastronomy-lint-staged-polaris-dynamo (npm)

Malware
Nov 2025

electron-builder-pipe-markdownlint-nextjs

npm

MAL-2025-186701

Malicious code in electron-builder-pipe-markdownlint-nextjs (npm)

Malware
Nov 2025

perseus-xenon-grus-polaris

npm

MAL-2025-188637

Malicious code in perseus-xenon-grus-polaris (npm)

Malware
Nov 2025

buffer-css-loader-draco-sirius

npm

MAL-2025-185921

Malicious code in buffer-css-loader-draco-sirius (npm)

Malware
Nov 2025

blazar-markdown-umbriel-filament

npm

MAL-2025-185848

Malicious code in blazar-markdown-umbriel-filament (npm)

Malware
Nov 2025

neptune-node-sass-altair-membrane

npm

MAL-2025-188225

Malicious code in neptune-node-sass-altair-membrane (npm)

Malware
Nov 2025

aldebaran-resolvers-rehype-carina

npm

MAL-2025-185422

Malicious code in aldebaran-resolvers-rehype-carina (npm)

Malware
Nov 2025

rest-neptune-style-loader-nconf

npm

MAL-2025-189212

Malicious code in rest-neptune-style-loader-nconf (npm)

Malware
Nov 2025

cli-hermes-mesosphere-corvus

npm

MAL-2025-186165

Malicious code in cli-hermes-mesosphere-corvus (npm)

Malware
Nov 2025

quantumfoam-wavefunction-lacerta-singularity

npm

MAL-2025-189013

Malicious code in quantumfoam-wavefunction-lacerta-singularity (npm)

Malware
Nov 2025

deimos-await-castor-dotenv

npm

MAL-2025-186512

Malicious code in deimos-await-castor-dotenv (npm)

Malware
Nov 2025
Showing 10273 - 10296 of 229,046
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001