Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,756
Total Incidents

elara-magnetar-asteroid-cosmicray

npm

MAL-2025-186696

Malicious code in elara-magnetar-asteroid-cosmicray (npm)

Malware
Nov 2025

aether-quantum-computing-koa-xanadu

npm

MAL-2025-185395

Malicious code in aether-quantum-computing-koa-xanadu (npm)

Malware
Nov 2025

phenomic-superposition-publish-fomalhaut

npm

MAL-2025-188660

Malicious code in phenomic-superposition-publish-fomalhaut (npm)

Malware
Nov 2025

pulsar-dotenv-safe-redis-fermiparadox

npm

MAL-2025-188968

Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

Malware
Nov 2025

reveal-md-electron-builder-chalk-steganography

npm

MAL-2025-189225

Malicious code in reveal-md-electron-builder-chalk-steganography (npm)

Malware
Nov 2025

pino-remark-string-nestjs

npm

MAL-2025-188711

Malicious code in pino-remark-string-nestjs (npm)

Malware
Nov 2025

yonder-sedna-innercore-slidev

npm

MAL-2025-190441

Malicious code in yonder-sedna-innercore-slidev (npm)

Malware
Nov 2025

server-callback-css-loader-archaeoastronomy

npm

MAL-2025-189459

Malicious code in server-callback-css-loader-archaeoastronomy (npm)

Malware
Nov 2025

gammarayburst-remark-boson-halley

npm

MAL-2025-187097

Malicious code in gammarayburst-remark-boson-halley (npm)

Malware
Nov 2025

mutation-cladistics-graviton-upgrade

npm

MAL-2025-188151

Malicious code in mutation-cladistics-graviton-upgrade (npm)

Malware
Nov 2025

void-kernel-integer-visualize-string

npm

MAL-2025-190181

Malicious code in void-kernel-integer-visualize-string (npm)

Malware
Nov 2025

elara-auth-enif-prettier

npm

MAL-2025-186691

Malicious code in elara-auth-enif-prettier (npm)

Malware
Nov 2025

bunyan-jasmine-winston-geoarchaeology

npm

MAL-2025-185946

Malicious code in bunyan-jasmine-winston-geoarchaeology (npm)

Malware
Nov 2025

eventhoriz-futurology-event-chariklo

npm

MAL-2025-186880

Malicious code in eventhoriz-futurology-event-chariklo (npm)

Malware
Nov 2025

jsonp-hydra-neuromorphic-void

npm

MAL-2025-187630

Malicious code in jsonp-hydra-neuromorphic-void (npm)

Malware
Nov 2025

deneb-bellatrix-eridanus-cz-conventional-changelog

npm

MAL-2025-186543

Malicious code in deneb-bellatrix-eridanus-cz-conventional-changelog (npm)

Malware
Nov 2025

key-orchestrate-promise-mu-bad

npm

MAL-2025-187684

Malicious code in key-orchestrate-promise-mu-bad (npm)

Malware
Nov 2025

less-bioinformatics-ganymede-virtualreality

npm

MAL-2025-187749

Malicious code in less-bioinformatics-ganymede-virtualreality (npm)

Malware
Nov 2025

publish-zooarchaeology-achernar-resolvers

npm

MAL-2025-188965

Malicious code in publish-zooarchaeology-achernar-resolvers (npm)

Malware
Nov 2025

framework-writable-dotenv-parse-variables-yonder

npm

MAL-2025-187050

Malicious code in framework-writable-dotenv-parse-variables-yonder (npm)

Malware
Nov 2025

cross-env-dorado-eslint-config-zephyr

npm

MAL-2025-186381

Malicious code in cross-env-dorado-eslint-config-zephyr (npm)

Malware
Nov 2025

version-sass-loader-webpack-quantum-computing

npm

MAL-2025-190145

Malicious code in version-sass-loader-webpack-quantum-computing (npm)

Malware
Nov 2025

private-husky-mensa-package

npm

MAL-2025-188828

Malicious code in private-husky-mensa-package (npm)

Malware
Nov 2025

tree-awk-notify-beta-cloud

npm

MAL-2025-189991

Malicious code in tree-awk-notify-beta-cloud (npm)

Malware
Nov 2025
Showing 13081 - 13104 of 232,756
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001