Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,834
Total Incidents

resolvers-semantic-ui-cosmochemistry-andromeda

npm

MAL-2025-189202

Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda (npm)

Malware
Nov 2025

paleontology-mensa-altair-exec

npm

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

Malware
Nov 2025

materialize-pegasus-typeorm-ursa

npm

MAL-2025-187945

Malicious code in materialize-pegasus-typeorm-ursa (npm)

Malware
Nov 2025

void-oberon-supernova-package

npm

MAL-2025-190182

Malicious code in void-oberon-supernova-package (npm)

Malware
Nov 2025

command-react-bootstrap-neuromorphic-magellan

npm

MAL-2025-186236

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

Malware
Nov 2025

string-container-benchmark-phi-cat

npm

MAL-2025-189693

Malicious code in string-container-benchmark-phi-cat (npm)

Malware
Nov 2025

javascript-start-halley-eclipse

npm

MAL-2025-187600

Malicious code in javascript-start-halley-eclipse (npm)

Malware
Nov 2025

development-rollup-pipe-koa

npm

MAL-2025-186581

Malicious code in development-rollup-pipe-koa (npm)

Malware
Nov 2025

standard-seismology-sync-native

npm

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

Malware
Nov 2025

sequelize-slidev-forever-rollup

npm

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

Malware
Nov 2025

graviton-command-global-axios

npm

MAL-2025-187209

Malicious code in graviton-command-global-axios (npm)

Malware
Nov 2025

virtualreality-bootstrap-geochronology-nuxtjs

npm

MAL-2025-190167

Malicious code in virtualreality-bootstrap-geochronology-nuxtjs (npm)

Malware
Nov 2025

yonder-fermion-delphinus-transform

npm

MAL-2025-190436

Malicious code in yonder-fermion-delphinus-transform (npm)

Malware
Nov 2025

commitlint-prosthetics-altair-magnetosphere

npm

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

Malware
Nov 2025

archaeogenetics-astrochemistry-quark-chakra-ui

npm

MAL-2025-185523

Malicious code in archaeogenetics-astrochemistry-quark-chakra-ui (npm)

Malware
Nov 2025

magnetosphere-procyon-neutronstar-cli

npm

MAL-2025-187915

Malicious code in magnetosphere-procyon-neutronstar-cli (npm)

Malware
Nov 2025

prosthetics-outercore-javascript-taphonomy

npm

MAL-2025-188881

Malicious code in prosthetics-outercore-javascript-taphonomy (npm)

Malware
Nov 2025

protected-old-compile-java-enum

npm

MAL-2025-188884

Malicious code in protected-old-compile-java-enum (npm)

Malware
Nov 2025

pegasus-xo-charon-karma

npm

MAL-2025-188609

Malicious code in pegasus-xo-charon-karma (npm)

Malware
Nov 2025

izar-ora-exec-genomics

npm

MAL-2025-187557

Malicious code in izar-ora-exec-genomics (npm)

Malware
Nov 2025

cosmogenic-spinner-andromeda-quasarjet

npm

MAL-2025-186353

Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm)

Malware
Nov 2025

xanadu-singularitarianism-fetch-fermion

npm

MAL-2025-190352

Malicious code in xanadu-singularitarianism-fetch-fermion (npm)

Malware
Nov 2025

async-parse-compile-sanitize-quick

npm

MAL-2025-185625

Malicious code in async-parse-compile-sanitize-quick (npm)

Malware
Nov 2025

protoplanetarydisk-zenith-mysql-palynology

npm

MAL-2025-188895

Malicious code in protoplanetarydisk-zenith-mysql-palynology (npm)

Malware
Nov 2025
Showing 14233 - 14256 of 232,834
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001