Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,834
Total Incidents

hexo-interstellarmedium-spinner-less

npm

MAL-2025-187353

Malicious code in hexo-interstellarmedium-spinner-less (npm)

Malware
Nov 2025

astrophysics-extremophile-library-bulma

npm

MAL-2025-185607

Malicious code in astrophysics-extremophile-library-bulma (npm)

Malware
Nov 2025

dotenv-safe-vortex-meissa-webdriverio

npm

MAL-2025-186627

Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

Malware
Nov 2025

sigma-compile-simulate-integer-bash

npm

MAL-2025-189487

Malicious code in sigma-compile-simulate-integer-bash (npm)

Malware
Nov 2025

meteor-meissa-airbnb-outercore

npm

MAL-2025-188028

Malicious code in meteor-meissa-airbnb-outercore (npm)

Malware
Nov 2025

panspermia-zenobia-cryonics-galaxy

npm

MAL-2025-188551

Malicious code in panspermia-zenobia-cryonics-galaxy (npm)

Malware
Nov 2025

ursa-inflation-atlas-taphonomy

npm

MAL-2025-190108

Malicious code in ursa-inflation-atlas-taphonomy (npm)

Malware
Nov 2025

eslint-webdriverio-mutation-sedna

npm

MAL-2025-186853

Malicious code in eslint-webdriverio-mutation-sedna (npm)

Malware
Nov 2025

cluster-norma-solarnebula-outercore

npm

MAL-2025-186182

Malicious code in cluster-norma-solarnebula-outercore (npm)

Malware
Nov 2025

paleontology-mensa-altair-exec

npm

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

Malware
Nov 2025

auth0-stratigraphy-ursa-cordelia

npm

MAL-2025-185668

Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

Malware
Nov 2025

command-react-bootstrap-neuromorphic-magellan

npm

MAL-2025-186236

Malicious code in command-react-bootstrap-neuromorphic-magellan (npm)

Malware
Nov 2025

sequelize-slidev-forever-rollup

npm

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

Malware
Nov 2025

standard-seismology-sync-native

npm

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

Malware
Nov 2025

neptune-slidev-pulsar-node-sass

npm

MAL-2025-188227

Malicious code in neptune-slidev-pulsar-node-sass (npm)

Malware
Nov 2025

farout-colors-hologram-mini-css-extract-plugin

npm

MAL-2025-186936

Malicious code in farout-colors-hologram-mini-css-extract-plugin (npm)

Malware
Nov 2025

beta-enum-notify-view-stack

npm

MAL-2025-185779

Malicious code in beta-enum-notify-view-stack (npm)

Malware
Nov 2025

socketio-spawn-pyxis-nestjs

npm

MAL-2025-189580

Malicious code in socketio-spawn-pyxis-nestjs (npm)

Malware
Nov 2025

vulcan-astrobiology-wavefunction-delphinus

npm

MAL-2025-190204

Malicious code in vulcan-astrobiology-wavefunction-delphinus (npm)

Malware
Nov 2025

rate-limiter-writable-dotenv-safe-geckodriver

npm

MAL-2025-189089

Malicious code in rate-limiter-writable-dotenv-safe-geckodriver (npm)

Malware
Nov 2025

json-geochemistry-exec-publish

npm

MAL-2025-187625

Malicious code in json-geochemistry-exec-publish (npm)

Malware
Nov 2025

nuxtjs-ionosphere-parsec-cosmology

npm

MAL-2025-188374

Malicious code in nuxtjs-ionosphere-parsec-cosmology (npm)

Malware
Nov 2025

bootes-config-docusaurus-ultra

npm

MAL-2025-185882

Malicious code in bootes-config-docusaurus-ultra (npm)

Malware
Nov 2025

heka-bootstrap-javascript-loopback

npm

MAL-2025-187301

Malicious code in heka-bootstrap-javascript-loopback (npm)

Malware
Nov 2025
Showing 14377 - 14400 of 232,834
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001