Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,933
Total Incidents

abstract-mu-kappa-authenticate-decode

npm

MAL-2025-185368

Malicious code in abstract-mu-kappa-authenticate-decode (npm)

Malware
Nov 2025

betelgeuse-nodejs-hugo-flare

npm

MAL-2025-185795

Malicious code in betelgeuse-nodejs-hugo-flare (npm)

Malware
Nov 2025

isostasy-meteor-passport-npm

npm

MAL-2025-187552

Malicious code in isostasy-meteor-passport-npm (npm)

Malware
Nov 2025

user-reject-good-code-sed

npm

MAL-2025-190127

Malicious code in user-reject-good-code-sed (npm)

Malware
Nov 2025

biotechnology-planckscale-nightwatch-bellatrix

npm

MAL-2025-185841

Malicious code in biotechnology-planckscale-nightwatch-bellatrix (npm)

Malware
Nov 2025

semantic-ui-redis-dendrochronology-run-script

npm

MAL-2025-189441

Malicious code in semantic-ui-redis-dendrochronology-run-script (npm)

Malware
Nov 2025

aether-foundation-request-tectonophysics

npm

MAL-2025-185390

Malicious code in aether-foundation-request-tectonophysics (npm)

Malware
Nov 2025

html-webpack-plugin-hologram-stream-install

npm

MAL-2025-187374

Malicious code in html-webpack-plugin-hologram-stream-install (npm)

Malware
Nov 2025

webdriver-manager-aether-less-loader-mensa

npm

MAL-2025-190257

Malicious code in webdriver-manager-aether-less-loader-mensa (npm)

Malware
Nov 2025

winston-adonis-dotenv-parse-variables-dagda

npm

MAL-2025-190328

Malicious code in winston-adonis-dotenv-parse-variables-dagda (npm)

Malware
Nov 2025

luna-local-optimize-css-assets-webpack-plugin-postgres

npm

MAL-2025-187878

Malicious code in luna-local-optimize-css-assets-webpack-plugin-postgres (npm)

Malware
Nov 2025

promise-user-static-small-stack

npm

MAL-2025-188865

Malicious code in promise-user-static-small-stack (npm)

Malware
Nov 2025

test-sigma-reject-daemon-cold

npm

MAL-2025-189887

Malicious code in test-sigma-reject-daemon-cold (npm)

Malware
Nov 2025

hexo-interstellarmedium-spinner-less

npm

MAL-2025-187353

Malicious code in hexo-interstellarmedium-spinner-less (npm)

Malware
Nov 2025

eslint-webdriverio-mutation-sedna

npm

MAL-2025-186853

Malicious code in eslint-webdriverio-mutation-sedna (npm)

Malware
Nov 2025

meteor-meissa-airbnb-outercore

npm

MAL-2025-188028

Malicious code in meteor-meissa-airbnb-outercore (npm)

Malware
Nov 2025

auth0-stratigraphy-ursa-cordelia

npm

MAL-2025-185668

Malicious code in auth0-stratigraphy-ursa-cordelia (npm)

Malware
Nov 2025

refactor-cat-epsilon-interface-monitor

npm

MAL-2025-189117

Malicious code in refactor-cat-epsilon-interface-monitor (npm)

Malware
Nov 2025

ignite-chai-mira-neptune

npm

MAL-2025-187424

Malicious code in ignite-chai-mira-neptune (npm)

Malware
Nov 2025

css-loader-castor-supervisor-elara

npm

MAL-2025-186414

Malicious code in css-loader-castor-supervisor-elara (npm)

Malware
Nov 2025

node-sass-luna-ora-terser-webpack-plugin

npm

MAL-2025-188319

Malicious code in node-sass-luna-ora-terser-webpack-plugin (npm)

Malware
Nov 2025

helios-fusion-rollup-command

npm

MAL-2025-187317

Malicious code in helios-fusion-rollup-command (npm)

Malware
Nov 2025

integer-slow-java-object-string

npm

MAL-2025-187505

Malicious code in integer-slow-java-object-string (npm)

Malware
Nov 2025

cluster-norma-solarnebula-outercore

npm

MAL-2025-186182

Malicious code in cluster-norma-solarnebula-outercore (npm)

Malware
Nov 2025
Showing 14881 - 14904 of 232,933
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001