Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

240,841
Total Incidents

int_sezzle_sfra

npm

MAL-2026-6577

Malicious code in int_sezzle_sfra (npm)

Malware
Jun 2026

stake-math

npm

MAL-2026-6585

Malicious code in stake-math (npm)

Malware
Jun 2026

lessload

npm

MAL-2026-6579

Malicious code in lessload (npm)

Backdoor
Jun 2026

yastatic-s3

npm

MAL-2026-6586

Malicious code in yastatic-s3 (npm)

Malware
Jun 2026

@ibrahim1337/baksen

npm

MAL-2026-6575

Malicious code in @ibrahim1337/baksen (npm)

Malware
Jun 2026

@thone33/analytics-injector

npm

MAL-2026-6563

Malicious code in @thone33/analytics-injector (npm)

Malware
Jun 2026

@thone33/core-utils

npm

MAL-2026-6564

Malicious code in @thone33/core-utils (npm)

Malware
Jun 2026

longzy-basic-ui

npm

MAL-2026-6569

Malicious code in longzy-basic-ui (npm)

Malware
Jun 2026

pkg-fallback

npm

MAL-2026-6570

Malicious code in pkg-fallback (npm)

Malware
Jun 2026

express-mocha-test

npm

MAL-2026-6568

Malicious code in express-mocha-test (npm)

Malware
Jun 2026

@epic-common/observability-node

npm

MAL-2026-6562

Malicious code in @epic-common/observability-node (npm)

Malware
Jun 2026

yandex-geobase

npm

MAL-2026-6574

Malicious code in yandex-geobase (npm)

Dep Confusion
Jun 2026

react-wp-viewer

npm

MAL-2026-6571

Malicious code in react-wp-viewer (npm)

Malware
Jun 2026

date-uuid

npm

MAL-2026-6566

Malicious code in date-uuid (npm)

Malware
Jun 2026

eslint-commit-parser

npm

MAL-2026-6567

Malicious code in eslint-commit-parser (npm)

Malware
Jun 2026

@uisp/utils

npm

MAL-2026-6565

Malicious code in @uisp/utils (npm)

Malware
Jun 2026

rebrandly-domains-digger

npm

MAL-2026-6572

Malicious code in rebrandly-domains-digger (npm)

Malware
Jun 2026

rebrandly-domains-search-client

npm

MAL-2026-6573

Malicious code in rebrandly-domains-search-client (npm)

Malware
Jun 2026

ulid-xyz

npm

MAL-2026-6672

Malicious code in ulid-xyz (npm)

Typosquat
Jun 2026

@digitalcnzz/embedded-sdk

npm

MAL-2026-6596

Malicious code in @digitalcnzz/embedded-sdk (npm)

Malware
Jun 2026

@digitalcnzz/commonmodule

npm

MAL-2026-6595

Malicious code in @digitalcnzz/commonmodule (npm)

Malware
Jun 2026

@longzy/react-native-polyfill

npm

MAL-2026-6597

Malicious code in @longzy/react-native-polyfill (npm)

Malware
Jun 2026

@sailing-package/core

npm

MAL-2026-6598

Malicious code in @sailing-package/core (npm)

Malware
Jun 2026

skillspector

PyPI

MAL-2026-6561

Malicious code in skillspector (PyPI)

Malware
Jun 2026
Showing 12025 - 12048 of 240,841
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001