Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,765
Total Incidents

mutation-docusaurus-scorpius-centauri

npm

MAL-2025-188152

Malicious code in mutation-docusaurus-scorpius-centauri (npm)

Malware
Nov 2025

bellatrix-prompts-webpack-paleobotany

npm

MAL-2025-185772

Malicious code in bellatrix-prompts-webpack-paleobotany (npm)

Malware
Nov 2025

blackhole-jupiter-spectron-webdriver-meteor

npm

MAL-2025-185843

Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

Malware
Nov 2025

meteor-cache-fomalhaut-winston

npm

MAL-2025-188015

Malicious code in meteor-cache-fomalhaut-winston (npm)

Malware
Nov 2025

compile-validate-sandbox-node-async

npm

MAL-2025-186260

Malicious code in compile-validate-sandbox-node-async (npm)

Malware
Nov 2025

arcturus-nucleosynthesis-commitizen-ini

npm

MAL-2025-185546

Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

Malware
Nov 2025

galaxy-xanthus-perseus-subscription

npm

MAL-2025-187089

Malicious code in galaxy-xanthus-perseus-subscription (npm)

Malware
Nov 2025

selenium-troposphere-nebula-betelgeuse

npm

MAL-2025-189433

Malicious code in selenium-troposphere-nebula-betelgeuse (npm)

Malware
Nov 2025

cosmos-coronalmassejection-remark-arcturus

npm

MAL-2025-186359

Malicious code in cosmos-coronalmassejection-remark-arcturus (npm)

Malware
Nov 2025

warp-dotenv-safe-andromeda-uglify-js

npm

MAL-2025-190220

Malicious code in warp-dotenv-safe-andromeda-uglify-js (npm)

Malware
Nov 2025

castor-andromeda-izar-config

npm

MAL-2025-186018

Malicious code in castor-andromeda-izar-config (npm)

Malware
Nov 2025

magellan-neptunology-extremophile-janus

npm

MAL-2025-187905

Malicious code in magellan-neptunology-extremophile-janus (npm)

Malware
Nov 2025

import-float-omega-user-eta

npm

MAL-2025-187435

Malicious code in import-float-omega-user-eta (npm)

Malware
Nov 2025

html-webpack-plugin-taphonomy-test-coronalmassejection

npm

MAL-2025-187377

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

Malware
Nov 2025

ganymede-nestjs-izar-release-it

npm

MAL-2025-187106

Malicious code in ganymede-nestjs-izar-release-it (npm)

Malware
Nov 2025

error-bash-monitor-stack-decode

npm

MAL-2025-186824

Malicious code in error-bash-monitor-stack-decode (npm)

Malware
Nov 2025

pi-compress-grid-class-fast

npm

MAL-2025-188694

Malicious code in pi-compress-grid-class-fast (npm)

Malware
Nov 2025

markdown-cz-conventional-changelog-link-proxima

npm

MAL-2025-187923

Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

Malware
Nov 2025

acamar-comet-flare-robotics

npm

MAL-2025-185371

Malicious code in acamar-comet-flare-robotics (npm)

Malware
Nov 2025

leda-loopback-markdown-pdf-quasar

npm

MAL-2025-187736

Malicious code in leda-loopback-markdown-pdf-quasar (npm)

Malware
Nov 2025

galaxy-cosmology-remark-cosmiconfig

npm

MAL-2025-187088

Malicious code in galaxy-cosmology-remark-cosmiconfig (npm)

Malware
Nov 2025

cosmogenic-genomics-scripts-cache

npm

MAL-2025-186351

Malicious code in cosmogenic-genomics-scripts-cache (npm)

Malware
Nov 2025

prompts-xanthus-blitz-eslint

npm

MAL-2025-188876

Malicious code in prompts-xanthus-blitz-eslint (npm)

Malware
Nov 2025

solis-chakra-ui-comet-lint

npm

MAL-2025-189588

Malicious code in solis-chakra-ui-comet-lint (npm)

Malware
Nov 2025
Showing 13633 - 13656 of 232,765
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001