Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

232,933
Total Incidents

neptune-lacerta-accretion-meteor

npm

MAL-2025-188222

Malicious code in neptune-lacerta-accretion-meteor (npm)

Malware
Nov 2025

express-superflare-antares-loopback

npm

MAL-2025-186930

Malicious code in express-superflare-antares-loopback (npm)

Malware
Nov 2025

dotenv-parse-variables-init-child-process-genomics

npm

MAL-2025-186618

Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

Malware
Nov 2025

alphard-prettier-fusion-astrochemistry

npm

MAL-2025-185443

Malicious code in alphard-prettier-fusion-astrochemistry (npm)

Malware
Nov 2025

passport-scripts-blitz-antd

npm

MAL-2025-188580

Malicious code in passport-scripts-blitz-antd (npm)

Malware
Nov 2025

float-beta-deploy-star-meta

npm

MAL-2025-186999

Malicious code in float-beta-deploy-star-meta (npm)

Malware
Nov 2025

babel-isostasy-fork-buffer

npm

MAL-2025-185722

Malicious code in babel-isostasy-fork-buffer (npm)

Malware
Nov 2025

package-zenobia-elektra-geodynamo

npm

MAL-2025-188496

Malicious code in package-zenobia-elektra-geodynamo (npm)

Malware
Nov 2025

sun-good-optimize-big-sandbox

npm

MAL-2025-189733

Malicious code in sun-good-optimize-big-sandbox (npm)

Malware
Nov 2025

global-mesosphere-extremophile-ablation

npm

MAL-2025-187182

Malicious code in global-mesosphere-extremophile-ablation (npm)

Malware
Nov 2025

browserify-nodemon-proxima-markdown

npm

MAL-2025-185916

Malicious code in browserify-nodemon-proxima-markdown (npm)

Malware
Nov 2025

less-astrochemistry-ceres-halley

npm

MAL-2025-187748

Malicious code in less-astrochemistry-ceres-halley (npm)

Malware
Nov 2025

publish-airbnb-changelog-archaeoastronomy

npm

MAL-2025-188944

Malicious code in publish-airbnb-changelog-archaeoastronomy (npm)

Malware
Nov 2025

virgo-joviology-proxima-install

npm

MAL-2025-190159

Malicious code in virgo-joviology-proxima-install (npm)

Malware
Nov 2025

quasar-robotics-soap-winston

npm

MAL-2025-189034

Malicious code in quasar-robotics-soap-winston (npm)

Malware
Nov 2025

archaeogenetics-typeorm-superagent-event

npm

MAL-2025-185529

Malicious code in archaeogenetics-typeorm-superagent-event (npm)

Malware
Nov 2025

socket-easy-balance-virtualize-simple

npm

MAL-2025-189567

Malicious code in socket-easy-balance-virtualize-simple (npm)

Malware
Nov 2025

eigenstate-spectron-loopback-wormhole

npm

MAL-2025-186690

Malicious code in eigenstate-spectron-loopback-wormhole (npm)

Malware
Nov 2025

terser-webpack-plugin-mechatronics-rest-neptunology

npm

MAL-2025-189874

Malicious code in terser-webpack-plugin-mechatronics-rest-neptunology (npm)

Malware
Nov 2025

zenobia-nightwatch-rigel-javascript

npm

MAL-2025-190453

Malicious code in zenobia-nightwatch-rigel-javascript (npm)

Malware
Nov 2025

virgo-build-equinox-init

npm

MAL-2025-190156

Malicious code in virgo-build-equinox-init (npm)

Malware
Nov 2025

bad-key-short-sudo-resolve

npm

MAL-2025-185736

Malicious code in bad-key-short-sudo-resolve (npm)

Malware
Nov 2025

entanglement-jasmine-seismology-nucleosynthesis

npm

MAL-2025-186759

Malicious code in entanglement-jasmine-seismology-nucleosynthesis (npm)

Malware
Nov 2025

miranda-despina-sqlite-ultra

npm

MAL-2025-188067

Malicious code in miranda-despina-sqlite-ultra (npm)

Malware
Nov 2025
Showing 15529 - 15552 of 232,933
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001