Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

225,187
Total Incidents

peer-deps-external

npm

MAL-0000-phantomraven-peer-deps-external

Malicious npm package: peer-deps-external (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-typescript

npm

MAL-0000-phantomraven-transform-typescript

Malicious npm package: transform-typescript (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

filter-imports

npm

MAL-0000-phantomraven-filter-imports

Malicious npm package: filter-imports (PhantomRaven campaign, Wave 4)

Malware
Mar 2026

transform-export-extensions

npm

MAL-0000-phantomraven-transform-export-extensions

Malicious npm package: transform-export-extensions (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-regexp-constructors

npm

MAL-0000-phantomraven-transform-regexp-constructors

Malicious npm package: transform-regexp-constructors (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-property-literals

npm

MAL-0000-phantomraven-transform-property-literals

Malicious npm package: transform-property-literals (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-spread

npm

MAL-0000-phantomraven-transform-spread

Malicious npm package: transform-spread (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-es2015-shorthand-properties

npm

MAL-0000-phantomraven-transform-es2015-shorthand-properties

Malicious npm package: transform-es2015-shorthand-properties (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-jsbi-to-bigint

npm

MAL-0000-phantomraven-transform-jsbi-to-bigint

Malicious npm package: transform-jsbi-to-bigint (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-member-expression-literals

npm

MAL-0000-phantomraven-transform-member-expression-literals

Malicious npm package: transform-member-expression-literals (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

typescript-resolvers

npm

MAL-0000-phantomraven-typescript-resolvers

Malicious npm package: typescript-resolvers (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

syntax-exponentiation-operator

npm

MAL-0000-phantomraven-syntax-exponentiation-operator

Malicious npm package: syntax-exponentiation-operator (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

vue-scoped-css

npm

MAL-0000-phantomraven-vue-scoped-css

Malicious npm package: vue-scoped-css (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

undeclared-variables-check

npm

MAL-0000-phantomraven-undeclared-variables-check

Malicious npm package: undeclared-variables-check (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

ignore-html-and-css-imports

npm

MAL-0000-phantomraven-ignore-html-and-css-imports

Malicious npm package: ignore-html-and-css-imports (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-simplify-comparison-operators

npm

MAL-0000-phantomraven-transform-simplify-comparison-operators

Malicious npm package: transform-simplify-comparison-operators (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-modules-systemjs

npm

MAL-0000-phantomraven-transform-modules-systemjs

Malicious npm package: transform-modules-systemjs (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

transform-react-jsx

npm

MAL-0000-phantomraven-transform-react-jsx

Malicious npm package: transform-react-jsx (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

syntax-async-generators

npm

MAL-0000-phantomraven-syntax-async-generators

Malicious npm package: syntax-async-generators (PhantomRaven campaign, Wave 3)

Malware
Mar 2026

dazaar-payment

npm

MAL-0000-phantomraven-dazaar-payment

Malicious npm package: dazaar-payment (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

transform-remove-debugger

npm

MAL-0000-phantomraven-transform-remove-debugger

Malicious npm package: transform-remove-debugger (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

developit

npm

MAL-0000-phantomraven-developit

Malicious npm package: developit (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

todo-plz

npm

MAL-0000-phantomraven-todo-plz

Malicious npm package: todo-plz (PhantomRaven campaign, Wave 2)

Malware
Mar 2026

minify-mangle-names

npm

MAL-0000-phantomraven-minify-mangle-names

Malicious npm package: minify-mangle-names (PhantomRaven campaign, Wave 2)

Malware
Mar 2026
Showing 1705 - 1728 of 225,187
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001