Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,834
Total Incidents

standard-seismology-sync-native

npm

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

Malware
Nov 2025

soap-nconf-europa-kronos

npm

MAL-2025-189556

Malicious code in soap-nconf-europa-kronos (npm)

Malware
Nov 2025

callisto-hyperion-dactyl-equinox

npm

MAL-2025-185989

Malicious code in callisto-hyperion-dactyl-equinox (npm)

Malware
Nov 2025

hexo-interstellarmedium-spinner-less

npm

MAL-2025-187353

Malicious code in hexo-interstellarmedium-spinner-less (npm)

Malware
Nov 2025

string-container-benchmark-phi-cat

npm

MAL-2025-189693

Malicious code in string-container-benchmark-phi-cat (npm)

Malware
Nov 2025

socketio-spawn-pyxis-nestjs

npm

MAL-2025-189580

Malicious code in socketio-spawn-pyxis-nestjs (npm)

Malware
Nov 2025

commitizen-markdown-luminescence-meteor

npm

MAL-2025-186241

Malicious code in commitizen-markdown-luminescence-meteor (npm)

Malware
Nov 2025

meteor-meissa-airbnb-outercore

npm

MAL-2025-188028

Malicious code in meteor-meissa-airbnb-outercore (npm)

Malware
Nov 2025

eslint-webdriverio-mutation-sedna

npm

MAL-2025-186853

Malicious code in eslint-webdriverio-mutation-sedna (npm)

Malware
Nov 2025

nextjs-google-transport-markdownlint

npm

MAL-2025-188263

Malicious code in nextjs-google-transport-markdownlint (npm)

Malware
Nov 2025

tardigrade-leda-jest-chakra-ui

npm

MAL-2025-189810

Malicious code in tardigrade-leda-jest-chakra-ui (npm)

Malware
Nov 2025

auth0-stratigraphy-ursa-cordelia

npm

MAL-2025-185668

Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

Malware
Nov 2025

pulsar-mocha-saturnology-jupiter

npm

MAL-2025-188972

Malicious code in pulsar-mocha-saturnology-jupiter (npm)

Malware
Nov 2025

commitlint-prosthetics-altair-magnetosphere

npm

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

Malware
Nov 2025

neptune-grus-fusion-sass-loader

npm

MAL-2025-188219

Malicious code in neptune-grus-fusion-sass-loader (npm)

Malware
Nov 2025

luminescence-achernar-promise-nuxtjs

npm

MAL-2025-187872

Malicious code in luminescence-achernar-promise-nuxtjs (npm)

Malware
Nov 2025

deimos-ceres-astro-isostasy

npm

MAL-2025-186513

Malicious code in deimos-ceres-astro-isostasy (npm)

Malware
Nov 2025

cluster-norma-solarnebula-outercore

npm

MAL-2025-186182

Malicious code in cluster-norma-solarnebula-outercore (npm)

Malware
Nov 2025

node-sass-luna-ora-terser-webpack-plugin

npm

MAL-2025-188319

Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

Malware
Nov 2025

selenium-cluster-framework-eleventy

npm

MAL-2025-189429

Malicious code in selenium-cluster-framework-eleventy (npm)

Malware
Nov 2025

vulcan-astrobiology-wavefunction-delphinus

npm

MAL-2025-190204

Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

Malware
Nov 2025

rate-limiter-writable-dotenv-safe-geckodriver

npm

MAL-2025-189089

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)

Malware
Nov 2025

event-biogeochemistry-blitz-eris

npm

MAL-2025-186874

Malicious code in event-biogeochemistry-blitz-eris (npm)

Malware
Nov 2025

nuxtjs-ionosphere-parsec-cosmology

npm

MAL-2025-188374

Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm)

Malware
Nov 2025
Showing 14329 - 14352 of 232,834
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001