Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,136
Total Incidents

coronalmassejection-terser-zooarchaeology-telesto

npm

MAL-2025-186315

Malicious code in coronalmassejection-terser-zooarchaeology-telesto (npm)

Malware
Nov 2025

pulsar-mocha-saturnology-jupiter

npm

MAL-2025-188972

Malicious code in pulsar-mocha-saturnology-jupiter (npm)

Malware
Nov 2025

nuxtjs-hugo-karma-antares

npm

MAL-2025-188373

Malicious code in nuxtjs-hugo-karma-antares (npm)

Malware
Nov 2025

ignite-callback-cosmochemistry-paleobotany

npm

MAL-2025-187423

Malicious code in ignite-callback-cosmochemistry-paleobotany (npm)

Malware
Nov 2025

polaris-asteroid-oscillation-australis

npm

MAL-2025-188759

Malicious code in polaris-asteroid-oscillation-australis (npm)

Malware
Nov 2025

morgan-spectron-webdriver-primatology-aldebaran

npm

MAL-2025-188130

Malicious code in morgan-spectron-webdriver-primatology-aldebaran (npm)

Malware
Nov 2025

iota-geomorphology-rate-limiter-jasmine

npm

MAL-2025-187537

Malicious code in iota-geomorphology-rate-limiter-jasmine (npm)

Malware
Nov 2025

standard-kuiperbelt-neuromorphic-sedimentology

npm

MAL-2025-189648

Malicious code in standard-kuiperbelt-neuromorphic-sedimentology (npm)

Malware
Nov 2025

commitlint-chalk-neptune-auriga

npm

MAL-2025-186247

Malicious code in commitlint-chalk-neptune-auriga (npm)

Malware
Nov 2025

javascript-async-enceladus-eslint-plugin

npm

MAL-2025-187596

Malicious code in javascript-async-enceladus-eslint-plugin (npm)

Malware
Nov 2025

epimetheus-uninstall-cressida-sedna

npm

MAL-2025-186786

Malicious code in epimetheus-uninstall-cressida-sedna (npm)

Malware
Nov 2025

development-postcss-loader-webpack-cosmicweb

npm

MAL-2025-186580

Malicious code in development-postcss-loader-webpack-cosmicweb (npm)

Malware
Nov 2025

meteor-lacerta-fornax-cryonics

npm

MAL-2025-188027

Malicious code in meteor-lacerta-fornax-cryonics (npm)

Malware
Nov 2025

mui-meissa-technosignature-wasat

npm

MAL-2025-188140

Malicious code in mui-meissa-technosignature-wasat (npm)

Malware
Nov 2025

vuepress-toml-magellan-rimraf

npm

MAL-2025-190194

Malicious code in vuepress-toml-magellan-rimraf (npm)

Malware
Nov 2025

proxima-spawn-mongoose-brane

npm

MAL-2025-188920

Malicious code in proxima-spawn-mongoose-brane (npm)

Malware
Nov 2025

nodemon-vega-umbriel-polaris

npm

MAL-2025-188338

Malicious code in nodemon-vega-umbriel-polaris (npm)

Malware
Nov 2025

node-mu-private-new-runtime

npm

MAL-2025-188312

Malicious code in node-mu-private-new-runtime (npm)

Malware
Nov 2025

vortex-auth0-string-holography

npm

MAL-2025-190185

Malicious code in vortex-auth0-string-holography (npm)

Malware
Nov 2025

stream-yildun-bootes-neutrino

npm

MAL-2025-189689

Malicious code in stream-yildun-bootes-neutrino (npm)

Malware
Nov 2025

draco-hermes-betelgeuse-auth0

npm

MAL-2025-186640

Malicious code in draco-hermes-betelgeuse-auth0 (npm)

Malware
Nov 2025

stop-auth-epigenetics-neutronstar

npm

MAL-2025-189669

Malicious code in stop-auth-epigenetics-neutronstar (npm)

Malware
Nov 2025

resonance-middleware-octans-graviton

npm

MAL-2025-189208

Malicious code in resonance-middleware-octans-graviton (npm)

Malware
Nov 2025

algol-apollo-indus-extremophile

npm

MAL-2025-185428

Malicious code in algol-apollo-indus-extremophile (npm)

Malware
Nov 2025
Showing 17665 - 17688 of 233,136
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001