Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,131
Total Incidents

zeta-try-stack-alert-cache

npm

MAL-2025-190483

Malicious code in zeta-try-stack-alert-cache (npm)

Malware
Nov 2025

void-exoplanet-ganymede-geodynamo

npm

MAL-2025-190178

Malicious code in void-exoplanet-ganymede-geodynamo (npm)

Malware
Nov 2025

blackhole-jupiter-spectron-webdriver-meteor

npm

MAL-2025-185843

Malicious code in blackhole-jupiter-spectron-webdriver-meteor (npm)

Malware
Nov 2025

webdriver-mocha-electron-cache-dione

npm

MAL-2025-190271

Malicious code in webdriver-mocha-electron-cache-dione (npm)

Malware
Nov 2025

pulsar-graviton-dotenv-safe-nuxtjs

npm

MAL-2025-188970

Malicious code in pulsar-graviton-dotenv-safe-nuxtjs (npm)

Malware
Nov 2025

colors-style-loader-bellatrix-tool

npm

MAL-2025-186209

Malicious code in colors-style-loader-bellatrix-tool (npm)

Malware
Nov 2025

markdown-cz-conventional-changelog-link-proxima

npm

MAL-2025-187923

Malicious code in markdown-cz-conventional-changelog-link-proxima (npm)

Malware
Nov 2025

arcturus-nucleosynthesis-commitizen-ini

npm

MAL-2025-185546

Malicious code in arcturus-nucleosynthesis-commitizen-ini (npm)

Malware
Nov 2025

dotenv-metalsmith-proxima-heliophysics

npm

MAL-2025-186613

Malicious code in dotenv-metalsmith-proxima-heliophysics (npm)

Malware
Nov 2025

async-css-minimizer-webpack-plugin-heka-redgiant

npm

MAL-2025-185615

Malicious code in async-css-minimizer-webpack-plugin-heka-redgiant (npm)

Malware
Nov 2025

dagda-ganymede-fornax-ursa

npm

MAL-2025-186469

Malicious code in dagda-ganymede-fornax-ursa (npm)

Malware
Nov 2025

exec-local-mongoose-dione

npm

MAL-2025-186887

Malicious code in exec-local-mongoose-dione (npm)

Malware
Nov 2025

farout-resolvers-photon-blazar

npm

MAL-2025-186943

Malicious code in farout-resolvers-photon-blazar (npm)

Malware
Nov 2025

debug-user-pipe-sun-simple

npm

MAL-2025-186498

Malicious code in debug-user-pipe-sun-simple (npm)

Malware
Nov 2025

grunt-bellatrix-less-sirius

npm

MAL-2025-187239

Malicious code in grunt-bellatrix-less-sirius (npm)

Malware
Nov 2025

cosmos-coronalmassejection-remark-arcturus

npm

MAL-2025-186359

Malicious code in cosmos-coronalmassejection-remark-arcturus (npm)

Malware
Nov 2025

html-webpack-plugin-taphonomy-test-coronalmassejection

npm

MAL-2025-187377

Malicious code in html-webpack-plugin-taphonomy-test-coronalmassejection (npm)

Malware
Nov 2025

passport-sirius-solis-quantum-computing

npm

MAL-2025-188583

Malicious code in passport-sirius-solis-quantum-computing (npm)

Malware
Nov 2025

xenon-comet-xo-quantum

npm

MAL-2025-190369

Malicious code in xenon-comet-xo-quantum (npm)

Malware
Nov 2025

wolf-baryon-pino-phenomic

npm

MAL-2025-190343

Malicious code in wolf-baryon-pino-phenomic (npm)

Malware
Nov 2025

user-root-node-transpile-class

npm

MAL-2025-190128

Malicious code in user-root-node-transpile-class (npm)

Malware
Nov 2025

abiogenesis-cli-start-jest

npm

MAL-2025-185354

Malicious code in abiogenesis-cli-start-jest (npm)

Malware
Nov 2025

shell-omicron-dog-bash-simple

npm

MAL-2025-189471

Malicious code in shell-omicron-dog-bash-simple (npm)

Malware
Nov 2025

castor-andromeda-izar-config

npm

MAL-2025-186018

Malicious code in castor-andromeda-izar-config (npm)

Malware
Nov 2025
Showing 17089 - 17112 of 233,131
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001