Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,831
Total Incidents

innercore-superposition-lint-staged-adonis

npm

MAL-2025-187485

Malicious code in innercore-superposition-lint-staged-adonis (npm)

Malware
Nov 2025

standard-seismology-sync-native

npm

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

Malware
Nov 2025

quito-config-lightyear-quito

npm

MAL-2025-189048

Malicious code in quito-config-lightyear-quito (npm)

Malware
Nov 2025

sequelize-slidev-forever-rollup

npm

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

Malware
Nov 2025

yakutsk-alphard-winston-nconf

npm

MAL-2025-190414

Malicious code in yakutsk-alphard-winston-nconf (npm)

Malware
Nov 2025

miranda-native-cross-env-oauth

npm

MAL-2025-188080

Malicious code in miranda-native-cross-env-oauth (npm)

Malware
Nov 2025

bunyan-areology-glaciology-charon

npm

MAL-2025-185942

Malicious code in bunyan-areology-glaciology-charon (npm)

Malware
Nov 2025

release-it-materialize-quasarjet-perturbation

npm

MAL-2025-189166

Malicious code in release-it-materialize-quasarjet-perturbation (npm)

Malware
Nov 2025

analyze-abstract-hash-code-iota

npm

MAL-2025-185448

Malicious code in analyze-abstract-hash-code-iota (npm)

Malware
Nov 2025

whitedwarf-selenology-jsonp-version

npm

MAL-2025-190320

Malicious code in whitedwarf-selenology-jsonp-version (npm)

Malware
Nov 2025

parallax-chakra-ui-mantle-inquirer

npm

MAL-2025-188553

Malicious code in parallax-chakra-ui-mantle-inquirer (npm)

Malware
Nov 2025

commitlint-prosthetics-altair-magnetosphere

npm

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

Malware
Nov 2025

canopus-odin-scorpius-css-minimizer-webpack-plugin

npm

MAL-2025-185995

Malicious code in canopus-odin-scorpius-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

paleoecology-backend-hydrogeology-postcss-loader

npm

MAL-2025-188518

Malicious code in paleoecology-backend-hydrogeology-postcss-loader (npm)

Malware
Nov 2025

triton-perseus-paleobotany-changelog

npm

MAL-2025-189999

Malicious code in triton-perseus-paleobotany-changelog (npm)

Malware
Nov 2025

orbit-cosmicweb-meteor-wolf

npm

MAL-2025-188463

Malicious code in orbit-cosmicweb-meteor-wolf (npm)

Malware
Nov 2025

leda-kaus-bellatrix-leda

npm

MAL-2025-187735

Malicious code in leda-kaus-bellatrix-leda (npm)

Malware
Nov 2025

resolvers-auth-materialize-ionosphere

npm

MAL-2025-189193

Malicious code in resolvers-auth-materialize-ionosphere (npm)

Malware
Nov 2025

xanthus-zenobia-entanglement-prompts

npm

MAL-2025-190361

Malicious code in xanthus-zenobia-entanglement-prompts (npm)

Malware
Nov 2025

lithosphere-changelog-grunt-uglify-js

npm

MAL-2025-187821

Malicious code in lithosphere-changelog-grunt-uglify-js (npm)

Malware
Nov 2025

protected-old-compile-java-enum

npm

MAL-2025-188884

Malicious code in protected-old-compile-java-enum (npm)

Malware
Nov 2025

stream-andromeda-proxima-loglevel

npm

MAL-2025-189681

Malicious code in stream-andromeda-proxima-loglevel (npm)

Malware
Nov 2025

node-sass-kastra-bellatrix-express

npm

MAL-2025-188318

Malicious code in node-sass-kastra-bellatrix-express (npm)

Malware
Nov 2025

user-analyze-uglify-minify-easy

npm

MAL-2025-190120

Malicious code in user-analyze-uglify-minify-easy (npm)

Malware
Nov 2025
Showing 13897 - 13920 of 232,831
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001