Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,765
Total Incidents

galaxy-blueshift-astrometry-quantumfoam

npm

MAL-2025-187087

Malicious code in galaxy-blueshift-astrometry-quantumfoam (npm)

Malware
Nov 2025

passport-deimos-isostasy-izar

npm

MAL-2025-188575

Malicious code in passport-deimos-isostasy-izar (npm)

Malware
Nov 2025

polaris-octans-bootstrap-bootstrap

npm

MAL-2025-188764

Malicious code in polaris-octans-bootstrap-bootstrap (npm)

Malware
Nov 2025

exosphere-rate-limiter-transhumanism-chariklo

npm

MAL-2025-186917

Malicious code in exosphere-rate-limiter-transhumanism-chariklo (npm)

Malware
Nov 2025

config-pipe-promise-start

npm

MAL-2025-186279

Malicious code in config-pipe-promise-start (npm)

Malware
Nov 2025

import-float-omega-user-eta

npm

MAL-2025-187435

Malicious code in import-float-omega-user-eta (npm)

Malware
Nov 2025

helios-centaurus-juno-lint-staged

npm

MAL-2025-187314

Malicious code in helios-centaurus-juno-lint-staged (npm)

Malware
Nov 2025

castor-andromeda-izar-config

npm

MAL-2025-186018

Malicious code in castor-andromeda-izar-config (npm)

Malware
Nov 2025

ganymede-nestjs-izar-release-it

npm

MAL-2025-187106

Malicious code in ganymede-nestjs-izar-release-it (npm)

Malware
Nov 2025

forever-cygnus-postcss-jwt

npm

MAL-2025-187009

Malicious code in forever-cygnus-postcss-jwt (npm)

Malware
Nov 2025

error-bash-monitor-stack-decode

npm

MAL-2025-186824

Malicious code in error-bash-monitor-stack-decode (npm)

Malware
Nov 2025

tectonophysics-farout-cordelia-darkenergy

npm

MAL-2025-189846

Malicious code in tectonophysics-farout-cordelia-darkenergy (npm)

Malware
Nov 2025

tree-validate-info-signal-abstract

npm

MAL-2025-189996

Malicious code in tree-validate-info-signal-abstract (npm)

Malware
Nov 2025

grep-cron-thread-grep-short

npm

MAL-2025-187226

Malicious code in grep-cron-thread-grep-short (npm)

Malware
Nov 2025

galaxy-cosmology-remark-cosmiconfig

npm

MAL-2025-187088

Malicious code in galaxy-cosmology-remark-cosmiconfig (npm)

Malware
Nov 2025

nextjs-event-chromedriver-pm2

npm

MAL-2025-188262

Malicious code in nextjs-event-chromedriver-pm2 (npm)

Malware
Nov 2025

native-nashira-seismology-heliophysics

npm

MAL-2025-188182

Malicious code in native-nashira-seismology-heliophysics (npm)

Malware
Nov 2025

css-minimizer-webpack-plugin-firebase-corvus-supernova

npm

MAL-2025-186419

Malicious code in css-minimizer-webpack-plugin-firebase-corvus-supernova (npm)

Malware
Nov 2025

leda-loopback-markdown-pdf-quasar

npm

MAL-2025-187736

Malicious code in leda-loopback-markdown-pdf-quasar (npm)

Malware
Nov 2025

quantum-uglify-js-acamar-hyperion

npm

MAL-2025-189008

Malicious code in quantum-uglify-js-acamar-hyperion (npm)

Malware
Nov 2025

upgrade-ophiuchus-nightwatch-lyra

npm

MAL-2025-190087

Malicious code in upgrade-ophiuchus-nightwatch-lyra (npm)

Malware
Nov 2025

deimos-phoenix-impulse-standard

npm

MAL-2025-186518

Malicious code in deimos-phoenix-impulse-standard (npm)

Malware
Nov 2025

try-alert-hash-catch-index

npm

MAL-2025-190007

Malicious code in try-alert-hash-catch-index (npm)

Malware
Nov 2025

exosphere-galaxy-planckscale-umbra

npm

MAL-2025-186915

Malicious code in exosphere-galaxy-planckscale-umbra (npm)

Malware
Nov 2025
Showing 13369 - 13392 of 232,765
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001