Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,127
Total Incidents

sequelize-slidev-forever-rollup

npm

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

Malware
Nov 2025

procyon-planckscale-steganography-procyon

npm

MAL-2025-188847

Malicious code in procyon-planckscale-steganography-procyon (npm)

Malware
Nov 2025

dorado-spectron-webdriver-spectron-cache

npm

MAL-2025-186611

Malicious code in dorado-spectron-webdriver-spectron-cache (npm)

Malware
Nov 2025

publish-json-solis-apollo

npm

MAL-2025-188949

Malicious code in publish-json-solis-apollo (npm)

Malware
Nov 2025

sandbox-quick-hash-psi-throw

npm

MAL-2025-189342

Malicious code in sandbox-quick-hash-psi-throw (npm)

Malware
Nov 2025

figures-proxima-sedna-envconfig

npm

MAL-2025-186970

Malicious code in figures-proxima-sedna-envconfig (npm)

Malware
Nov 2025

adonis-child-process-pegasus-repository

npm

MAL-2025-185384

Malicious code in adonis-child-process-pegasus-repository (npm)

Malware
Nov 2025

hexo-phenomic-odin-element-ui

npm

MAL-2025-187354

Malicious code in hexo-phenomic-odin-element-ui (npm)

Malware
Nov 2025

commitlint-prosthetics-altair-magnetosphere

npm

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

Malware
Nov 2025

try-import-fork-socket-beta

npm

MAL-2025-190010

Malicious code in try-import-fork-socket-beta (npm)

Malware
Nov 2025

achernar-zenith-ultra-joviology

npm

MAL-2025-185383

Malicious code in achernar-zenith-ultra-joviology (npm)

Malware
Nov 2025

native-quasar-middleware-cz-conventional-changelog

npm

MAL-2025-188183

Malicious code in native-quasar-middleware-cz-conventional-changelog (npm)

Malware
Nov 2025

slidev-parallax-epimetheus-redis

npm

MAL-2025-189537

Malicious code in slidev-parallax-epimetheus-redis (npm)

Malware
Nov 2025

magnetosphere-procyon-neutronstar-cli

npm

MAL-2025-187915

Malicious code in magnetosphere-procyon-neutronstar-cli (npm)

Malware
Nov 2025

chai-gatsby-coronalmassejection-nuxtjs

npm

MAL-2025-186076

Malicious code in chai-gatsby-coronalmassejection-nuxtjs (npm)

Malware
Nov 2025

scripts-yaml-janus-gacrux

npm

MAL-2025-189393

Malicious code in scripts-yaml-janus-gacrux (npm)

Malware
Nov 2025

emulate-sudo-query-balance-air

npm

MAL-2025-186725

Malicious code in emulate-sudo-query-balance-air (npm)

Malware
Nov 2025

socket-minify-export-catch-file

npm

MAL-2025-189570

Malicious code in socket-minify-export-catch-file (npm)

Malware
Nov 2025

protoplanetarydisk-zenith-mysql-palynology

npm

MAL-2025-188895

Malicious code in protoplanetarydisk-zenith-mysql-palynology (npm)

Malware
Nov 2025

inquirer-quasar-polaris-aquarius

npm

MAL-2025-187489

Malicious code in inquirer-quasar-polaris-aquarius (npm)

Malware
Nov 2025

sails-link-update-glaciology

npm

MAL-2025-189330

Malicious code in sails-link-update-glaciology (npm)

Malware
Nov 2025

ini-barnard-juno-shelljs

npm

MAL-2025-187470

Malicious code in ini-barnard-juno-shelljs (npm)

Malware
Nov 2025

inquirer-stream-metabolomics-uninstall

npm

MAL-2025-187491

Malicious code in inquirer-stream-metabolomics-uninstall (npm)

Malware
Nov 2025

umbra-australis-dotenv-safe-google

npm

MAL-2025-190035

Malicious code in umbra-australis-dotenv-safe-google (npm)

Malware
Nov 2025
Showing 16705 - 16728 of 233,127
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001