Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,831
Total Incidents

ganymede-palynology-proxima-robotics

npm

MAL-2025-187107

Malicious code in ganymede-palynology-proxima-robotics (npm)

Malware
Nov 2025

nu-double-import-theta-old

npm

MAL-2025-188364

Malicious code in nu-double-import-theta-old (npm)

Malware
Nov 2025

tectonophysics-levels-zenith-karma

npm

MAL-2025-189847

Malicious code in tectonophysics-levels-zenith-karma (npm)

Malware
Nov 2025

dendrochronology-test-markdownlint-grunt

npm

MAL-2025-186542

Malicious code in dendrochronology-test-markdownlint-grunt (npm)

Malware
Nov 2025

less-loader-react-bootstrap-cosmicray-spectroscopy

npm

MAL-2025-187757

Malicious code in less-loader-react-bootstrap-cosmicray-spectroscopy (npm)

Malware
Nov 2025

phoebe-cosmicweb-meteor-install

npm

MAL-2025-188670

Malicious code in phoebe-cosmicweb-meteor-install (npm)

Malware
Nov 2025

eclipse-hercules-europa-prettier-plugin-markdown

npm

MAL-2025-186678

Malicious code in eclipse-hercules-europa-prettier-plugin-markdown (npm)

Malware
Nov 2025

zenobia-mdx-phoenix-kronos

npm

MAL-2025-190452

Malicious code in zenobia-mdx-phoenix-kronos (npm)

Malware
Nov 2025

iota-levels-foundation-solis

npm

MAL-2025-187541

Malicious code in iota-levels-foundation-solis (npm)

Malware
Nov 2025

nconf-superagent-public-writable

npm

MAL-2025-188193

Malicious code in nconf-superagent-public-writable (npm)

Malware
Nov 2025

frontend-kuiperbelt-proteomics-miranda

npm

MAL-2025-187052

Malicious code in frontend-kuiperbelt-proteomics-miranda (npm)

Malware
Nov 2025

quick-orchestrate-resolve-cat-tau

npm

MAL-2025-189045

Malicious code in quick-orchestrate-resolve-cat-tau (npm)

Malware
Nov 2025

fast-stack-tau-execute-hash

npm

MAL-2025-186946

Malicious code in fast-stack-tau-execute-hash (npm)

Malware
Nov 2025

epsilon-catch-cold-beta-new

npm

MAL-2025-186789

Malicious code in epsilon-catch-cold-beta-new (npm)

Malware
Nov 2025

double-decode-encrypt-cache-bundle

npm

MAL-2025-186631

Malicious code in double-decode-encrypt-cache-bundle (npm)

Malware
Nov 2025

fornax-library-eslint-javascript

npm

MAL-2025-187032

Malicious code in fornax-library-eslint-javascript (npm)

Malware
Nov 2025

sass-loader-prompts-inquirer-blaze

npm

MAL-2025-189357

Malicious code in sass-loader-prompts-inquirer-blaze (npm)

Malware
Nov 2025

hydra-helmet-terser-webpack-plugin-ignite

npm

MAL-2025-187399

Malicious code in hydra-helmet-terser-webpack-plugin-ignite (npm)

Malware
Nov 2025

blueshift-perturbation-centauri-paleoceanography

npm

MAL-2025-185865

Malicious code in blueshift-perturbation-centauri-paleoceanography (npm)

Malware
Nov 2025

quantum-computing-technosignature-ablation-bulma

npm

MAL-2025-189000

Malicious code in quantum-computing-technosignature-ablation-bulma (npm)

Malware
Nov 2025

websockets-kinetic-janus-sedna

npm

MAL-2025-190296

Malicious code in websockets-kinetic-janus-sedna (npm)

Malware
Nov 2025

scripts-duplex-innercore-mongoose

npm

MAL-2025-189385

Malicious code in scripts-duplex-innercore-mongoose (npm)

Malware
Nov 2025

library-dotenv-safe-gridsome-singularity

npm

MAL-2025-187777

Malicious code in library-dotenv-safe-gridsome-singularity (npm)

Malware
Nov 2025

cli-aldebaran-geodynamo-jabbah

npm

MAL-2025-186162

Malicious code in cli-aldebaran-geodynamo-jabbah (npm)

Malware
Nov 2025
Showing 13729 - 13752 of 232,831
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001