Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,933
Total Incidents

alphard-prettier-fusion-astrochemistry

npm

MAL-2025-185443

Malicious code in alphard-prettier-fusion-astrochemistry (npm)

Malware
Nov 2025

child-process-stratigraphy-subduction-node-sass

npm

MAL-2025-186146

Malicious code in child-process-stratigraphy-subduction-node-sass (npm)

Malware
Nov 2025

link-loopback-hydrogeology-gacrux

npm

MAL-2025-187793

Malicious code in link-loopback-hydrogeology-gacrux (npm)

Malware
Nov 2025

css-loader-castor-supervisor-elara

npm

MAL-2025-186414

Malicious code in css-loader-castor-supervisor-elara (npm)

Malware
Nov 2025

upgrade-hexo-gulp-cosmogenic

npm

MAL-2025-190084

Malicious code in upgrade-hexo-gulp-cosmogenic (npm)

Malware
Nov 2025

prettier-stylelint-soap-acamar-build

npm

MAL-2025-188812

Malicious code in prettier-stylelint-soap-acamar-build (npm)

Malware
Nov 2025

luminescence-chai-cryonics-eclipse

npm

MAL-2025-187873

Malicious code in luminescence-chai-cryonics-eclipse (npm)

Malware
Nov 2025

sun-good-optimize-big-sandbox

npm

MAL-2025-189733

Malicious code in sun-good-optimize-big-sandbox (npm)

Malware
Nov 2025

koa-eslint-plugin-corvus-dotenv-parse-variables

npm

MAL-2025-187699

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables (npm)

Malware
Nov 2025

rate-limiter-hyperion-pavo-protractor

npm

MAL-2025-189085

Malicious code in rate-limiter-hyperion-pavo-protractor (npm)

Malware
Nov 2025

publish-postcss-loader-achernar-hermes

npm

MAL-2025-188954

Malicious code in publish-postcss-loader-achernar-hermes (npm)

Malware
Nov 2025

spica-html-webpack-plugin-kronos-husky

npm

MAL-2025-189623

Malicious code in spica-html-webpack-plugin-kronos-husky (npm)

Malware
Nov 2025

string-compile-module-benchmark-report

npm

MAL-2025-189692

Malicious code in string-compile-module-benchmark-report (npm)

Malware
Nov 2025

report-serialize-rho-public-file

npm

MAL-2025-189183

Malicious code in report-serialize-rho-public-file (npm)

Malware
Nov 2025

magnetosphere-quito-isostasy-despina

npm

MAL-2025-187916

Malicious code in magnetosphere-quito-isostasy-despina (npm)

Malware
Nov 2025

apollo-spinner-solis-rigel

npm

MAL-2025-185509

Malicious code in apollo-spinner-solis-rigel (npm)

Malware
Nov 2025

apollo-sirius-upgrade-iota

npm

MAL-2025-185507

Malicious code in apollo-sirius-upgrade-iota (npm)

Malware
Nov 2025

fork-omicron-socket-easy-array

npm

MAL-2025-187021

Malicious code in fork-omicron-socket-easy-array (npm)

Malware
Nov 2025

spinner-rest-standard-writable

npm

MAL-2025-189628

Malicious code in spinner-rest-standard-writable (npm)

Malware
Nov 2025

zephyr-eris-spinner-quasar

npm

MAL-2025-190462

Malicious code in zephyr-eris-spinner-quasar (npm)

Malware
Nov 2025

titan-iota-carina-vuepress

npm

MAL-2025-189939

Malicious code in titan-iota-carina-vuepress (npm)

Malware
Nov 2025

neutronstar-native-dynamo-hydra

npm

MAL-2025-188252

Malicious code in neutronstar-native-dynamo-hydra (npm)

Malware
Nov 2025

subscription-firebase-buffer-json

npm

MAL-2025-189721

Malicious code in subscription-firebase-buffer-json (npm)

Malware
Nov 2025

bad-key-short-sudo-resolve

npm

MAL-2025-185736

Malicious code in bad-key-short-sudo-resolve (npm)

Malware
Nov 2025
Showing 15289 - 15312 of 232,933
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001