Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,127
Total Incidents

rollup-plugin-start-galaxy-neutronstar

npm

MAL-2025-189276

Malicious code in rollup-plugin-start-galaxy-neutronstar (npm)

Malware
Nov 2025

root-user-await-validate-iota

npm

MAL-2025-189283

Malicious code in root-user-await-validate-iota (npm)

Malware
Nov 2025

mira-wolf-prompts-got

npm

MAL-2025-188063

Malicious code in mira-wolf-prompts-got (npm)

Malware
Nov 2025

node-sass-nashira-xerxes-css-minimizer-webpack-plugin

npm

MAL-2025-188321

Malicious code in node-sass-nashira-xerxes-css-minimizer-webpack-plugin (npm)

Malware
Nov 2025

hawkingradiation-ora-celeste-toml

npm

MAL-2025-187296

Malicious code in hawkingradiation-ora-celeste-toml (npm)

Malware
Nov 2025

gemini-csv-cryonics-castor

npm

MAL-2025-187133

Malicious code in gemini-csv-cryonics-castor (npm)

Malware
Nov 2025

paleontology-luminescence-less-hermes

npm

MAL-2025-188533

Malicious code in paleontology-luminescence-less-hermes (npm)

Malware
Nov 2025

sequelize-phoebe-bunyan-test

npm

MAL-2025-189447

Malicious code in sequelize-phoebe-bunyan-test (npm)

Malware
Nov 2025

blackhole-prettier-plugin-markdown-achernar-redis

npm

MAL-2025-185844

Malicious code in blackhole-prettier-plugin-markdown-achernar-redis (npm)

Malware
Nov 2025

pipe-parallax-build-kinetic

npm

MAL-2025-188723

Malicious code in pipe-parallax-build-kinetic (npm)

Malware
Nov 2025

sed-float-bad-void-stack

npm

MAL-2025-189399

Malicious code in sed-float-bad-void-stack (npm)

Malware
Nov 2025

cosmos-void-procyon-nanotechnology

npm

MAL-2025-186363

Malicious code in cosmos-void-procyon-nanotechnology (npm)

Malware
Nov 2025

native-electron-builder-nashira-tachyon

npm

MAL-2025-188178

Malicious code in native-electron-builder-nashira-tachyon (npm)

Malware
Nov 2025

singularity-bunyan-eslint-config-publish

npm

MAL-2025-189507

Malicious code in singularity-bunyan-eslint-config-publish (npm)

Malware
Nov 2025

selenium-dotenv-parse-variables-gacrux-vega

npm

MAL-2025-189430

Malicious code in selenium-dotenv-parse-variables-gacrux-vega (npm)

Malware
Nov 2025

interstellarmedium-materialize-robotics-jovian

npm

MAL-2025-187515

Malicious code in interstellarmedium-materialize-robotics-jovian (npm)

Malware
Nov 2025

dotenv-safe-vortex-meissa-webdriverio

npm

MAL-2025-186627

Malicious code in dotenv-safe-vortex-meissa-webdriverio (npm)

Malware
Nov 2025

simple-load-info-error-cold

npm

MAL-2025-189501

Malicious code in simple-load-info-error-cold (npm)

Malware
Nov 2025

mechatronics-boson-quasarjet-wolf

npm

MAL-2025-187960

Malicious code in mechatronics-boson-quasarjet-wolf (npm)

Malware
Nov 2025

standard-seismology-sync-native

npm

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

Malware
Nov 2025

sequelize-slidev-forever-rollup

npm

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

Malware
Nov 2025

cypress-phoenix-higgs-chromedriver

npm

MAL-2025-186449

Malicious code in cypress-phoenix-higgs-chromedriver (npm)

Malware
Nov 2025

mira-apex-lint-bellatrix

npm

MAL-2025-188056

Malicious code in mira-apex-lint-bellatrix (npm)

Malware
Nov 2025

paleontology-mensa-altair-exec

npm

MAL-2025-188535

Malicious code in paleontology-mensa-altair-exec (npm)

Malware
Nov 2025
Showing 16633 - 16656 of 233,127
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001