Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,118
Total Incidents

geodynamo-radiant-slides-bioinformatics

npm

MAL-2025-187164

Malicious code in geodynamo-radiant-slides-bioinformatics (npm)

Malware
Nov 2025

eigenstate-gravitationalwave-config-ora

npm

MAL-2025-186687

Malicious code in eigenstate-gravitationalwave-config-ora (npm)

Malware
Nov 2025

gemini-query-adonis-request

npm

MAL-2025-187143

Malicious code in gemini-query-adonis-request (npm)

Malware
Nov 2025

holography-commitlint-xml-unuk

npm

MAL-2025-187366

Malicious code in holography-commitlint-xml-unuk (npm)

Malware
Nov 2025

morgan-meteor-loop-delphinus

npm

MAL-2025-188125

Malicious code in morgan-meteor-loop-delphinus (npm)

Malware
Nov 2025

webdriver-mocha-chromedriver-javascript-json

npm

MAL-2025-190270

Malicious code in webdriver-mocha-chromedriver-javascript-json (npm)

Malware
Nov 2025

root-user-await-validate-iota

npm

MAL-2025-189283

Malicious code in root-user-await-validate-iota (npm)

Malware
Nov 2025

cloud-water-old-moon-wind

npm

MAL-2025-186176

Malicious code in cloud-water-old-moon-wind (npm)

Malware
Nov 2025

node-sass-nashira-xerxes-css-minimizer-webpack-plugin

npm

MAL-2025-188321

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

tool-pino-xenos-rollup

npm

MAL-2025-189957

Malicious code in tool-pino-xenos-rollup (npm)

Malware
Nov 2025

bad-key-short-sudo-resolve

npm

MAL-2025-185736

Malicious code in bad-key-short-sudo-resolve (npm)

Malware
Nov 2025

cosmicweb-antares-lithosphere-phoenix

npm

MAL-2025-186341

Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)

Malware
Nov 2025

mensa-fornax-chariklo-geochemistry

npm

MAL-2025-187979

Malicious code in mensa-fornax-chariklo-geochemistry (npm)

Malware
Nov 2025

aquarius-configstore-eclipse-celeste

npm

MAL-2025-185513

Malicious code in aquarius-configstore-eclipse-celeste (npm)

Malware
Nov 2025

root-cluster-bad-final-rho

npm

MAL-2025-189278

Malicious code in root-cluster-bad-final-rho (npm)

Malware
Nov 2025

gulp-cluster-hermes-backend

npm

MAL-2025-187250

Malicious code in gulp-cluster-hermes-backend (npm)

Malware
Nov 2025

cache-phi-public-info-sed

npm

MAL-2025-185967

Malicious code in cache-phi-public-info-sed (npm)

Malware
Nov 2025

ganymede-flare-aurora-membrane

npm

MAL-2025-187101

Malicious code in ganymede-flare-aurora-membrane (npm)

Malware
Nov 2025

array-async-export-lambda-transpile

npm

MAL-2025-185565

Malicious code in array-async-export-lambda-transpile (npm)

Malware
Nov 2025

singularity-kuiperbelt-loopback-fermiparadox

npm

MAL-2025-189509

Malicious code in singularity-kuiperbelt-loopback-fermiparadox (npm)

Malware
Nov 2025

sass-loader-lepton-nebula-virgo

npm

MAL-2025-189356

Malicious code in sass-loader-lepton-nebula-virgo (npm)

Malware
Nov 2025

paleoclimatology-cosmogenic-crust-kardashevscale

npm

MAL-2025-188506

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

Malware
Nov 2025

encode-route-deserialize-eta-export

npm

MAL-2025-186741

Malicious code in encode-route-deserialize-eta-export (npm)

Malware
Nov 2025

index-wind-info-emulate-fork

npm

MAL-2025-187455

Malicious code in index-wind-info-emulate-fork (npm)

Malware
Nov 2025
Showing 16513 - 16536 of 233,118
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001