Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,127
Total Incidents

ignite-configstore-morgan-kastra

npm

MAL-2025-187425

Malicious code in ignite-configstore-morgan-kastra (npm)

Malware
Nov 2025

hexo-phenomic-odin-element-ui

npm

MAL-2025-187354

Malicious code in hexo-phenomic-odin-element-ui (npm)

Malware
Nov 2025

nightwatch-javascript-kastra-antares

npm

MAL-2025-188287

Malicious code in nightwatch-javascript-kastra-antares (npm)

Malware
Nov 2025

asthenosphere-auth-andromeda-gacrux

npm

MAL-2025-185581

Malicious code in asthenosphere-auth-andromeda-gacrux (npm)

Malware
Nov 2025

array-upsilon-decrypt-container-object

npm

MAL-2025-185572

Malicious code in array-upsilon-decrypt-container-object (npm)

Malware
Nov 2025

command-dotenv-betelgeuse-neutronstar

npm

MAL-2025-186231

Malicious code in command-dotenv-betelgeuse-neutronstar (npm)

Malware
Nov 2025

standard-seismology-sync-native

npm

MAL-2025-189651

Malicious code in standard-seismology-sync-native (npm)

Malware
Nov 2025

tau-psi-theta-process-optimize

npm

MAL-2025-189821

Malicious code in tau-psi-theta-process-optimize (npm)

Malware
Nov 2025

commitlint-prosthetics-altair-magnetosphere

npm

MAL-2025-186254

Malicious code in commitlint-prosthetics-altair-magnetosphere (npm)

Malware
Nov 2025

umbra-australis-dotenv-safe-google

npm

MAL-2025-190035

Malicious code in umbra-australis-dotenv-safe-google (npm)

Malware
Nov 2025

build-enceladus-supernova-joviology

npm

MAL-2025-185926

Malicious code in build-enceladus-supernova-joviology (npm)

Malware
Nov 2025

magnetosphere-procyon-neutronstar-cli

npm

MAL-2025-187915

Malicious code in magnetosphere-procyon-neutronstar-cli (npm)

Malware
Nov 2025

config-elara-leda-nucleosynthesis

npm

MAL-2025-186276

Malicious code in config-elara-leda-nucleosynthesis (npm)

Malware
Nov 2025

webdriverio-umbriel-sequelize-version

npm

MAL-2025-190284

Malicious code in webdriverio-umbriel-sequelize-version (npm)

Malware
Nov 2025

sequelize-slidev-forever-rollup

npm

MAL-2025-189448

Malicious code in sequelize-slidev-forever-rollup (npm)

Malware
Nov 2025

protected-old-compile-java-enum

npm

MAL-2025-188884

Malicious code in protected-old-compile-java-enum (npm)

Malware
Nov 2025

grep-emulate-module-assert-chi

npm

MAL-2025-187228

Malicious code in grep-emulate-module-assert-chi (npm)

Malware
Nov 2025

protoplanetarydisk-zenith-mysql-palynology

npm

MAL-2025-188895

Malicious code in protoplanetarydisk-zenith-mysql-palynology (npm)

Malware
Nov 2025

byte-runtime-easy-promise-transpile

npm

MAL-2025-185960

Malicious code in byte-runtime-easy-promise-transpile (npm)

Malware
Nov 2025

child-process-charon-mui-on

npm

MAL-2025-186142

Malicious code in child-process-charon-mui-on (npm)

Malware
Nov 2025

wormhole-passport-norma-gravitationalwave

npm

MAL-2025-190345

Malicious code in wormhole-passport-norma-gravitationalwave (npm)

Malware
Nov 2025

ganymede-palynology-proxima-robotics

npm

MAL-2025-187107

Malicious code in ganymede-palynology-proxima-robotics (npm)

Malware
Nov 2025

accretion-kastra-nightmare-module

npm

MAL-2025-185378

Malicious code in accretion-kastra-nightmare-module (npm)

Malware
Nov 2025

singularitarianism-interferometry-cryovolcano-mocha

npm

MAL-2025-189505

Malicious code in singularitarianism-interferometry-cryovolcano-mocha (npm)

Malware
Nov 2025
Showing 16753 - 16776 of 233,127
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001