Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,157
Total Incidents

antares-apex-robotics-quito

npm

MAL-2025-185460

Malicious code in antares-apex-robotics-quito (npm)

Malware
Nov 2025

neutronstar-quark-dotenv-safe-koa

npm

MAL-2025-188253

Malicious code in neutronstar-quark-dotenv-safe-koa (npm)

Malware
Nov 2025

cordelia-dione-hyperion-superposition

npm

MAL-2025-186306

Malicious code in cordelia-dione-hyperion-superposition (npm)

Malware
Nov 2025

wasat-pulsar-exobiology-link

npm

MAL-2025-190235

Malicious code in wasat-pulsar-exobiology-link (npm)

Malware
Nov 2025

gemini-postgres-rehype-sagitta

npm

MAL-2025-187142

Malicious code in gemini-postgres-rehype-sagitta (npm)

Malware
Nov 2025

australis-geomorphology-adonis-babel

npm

MAL-2025-185658

Malicious code in australis-geomorphology-adonis-babel (npm)

Malware
Nov 2025

vortex-auth0-string-holography

npm

MAL-2025-190185

Malicious code in vortex-auth0-string-holography (npm)

Malware
Nov 2025

daemon-old-mu-interpret-deserialize

npm

MAL-2025-186466

Malicious code in daemon-old-mu-interpret-deserialize (npm)

Malware
Nov 2025

eslint-plugin-ophiuchus-pino-chromedriver

npm

MAL-2025-186847

Malicious code in eslint-plugin-ophiuchus-pino-chromedriver (npm)

Malware
Nov 2025

quasarjet-magellan-eslint-config-capella

npm

MAL-2025-189036

Malicious code in quasarjet-magellan-eslint-config-capella (npm)

Malware
Nov 2025

node-mu-private-new-runtime

npm

MAL-2025-188312

Malicious code in node-mu-private-new-runtime (npm)

Malware
Nov 2025

zooarchaeology-darkmatter-higgs-algol

npm

MAL-2025-190485

Malicious code in zooarchaeology-darkmatter-higgs-algol (npm)

Malware
Nov 2025

cryovolcano-miranda-blueshift-rimraf

npm

MAL-2025-186400

Malicious code in cryovolcano-miranda-blueshift-rimraf (npm)

Malware
Nov 2025

zero-daemon-small-fire-pi

npm

MAL-2025-190473

Malicious code in zero-daemon-small-fire-pi (npm)

Malware
Nov 2025

alpha-view-grep-abstract-pipe

npm

MAL-2025-185435

Malicious code in alpha-view-grep-abstract-pipe (npm)

Malware
Nov 2025

fornax-materialize-sails-dactyl

npm

MAL-2025-187034

Malicious code in fornax-materialize-sails-dactyl (npm)

Malware
Nov 2025

prettier-plugin-markdown-exoplanet-saturnology-frontend

npm

MAL-2025-188802

Malicious code in prettier-plugin-markdown-exoplanet-saturnology-frontend (npm)

Malware
Nov 2025

terser-webpack-plugin-delphinus-membrane-cryovolcano

npm

MAL-2025-189873

Malicious code in terser-webpack-plugin-delphinus-membrane-cryovolcano (npm)

Malware
Nov 2025

cypress-cosmiconfig-dotenv-safe-telesto

npm

MAL-2025-186446

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto (npm)

Malware
Nov 2025

report-good-error-user-parse

npm

MAL-2025-189181

Malicious code in report-good-error-user-parse (npm)

Malware
Nov 2025

biotechnology-draco-webpack-bellatrix

npm

MAL-2025-185838

Malicious code in biotechnology-draco-webpack-bellatrix (npm)

Malware
Nov 2025

install-enif-blitz-supervisor

npm

MAL-2025-187496

Malicious code in install-enif-blitz-supervisor (npm)

Malware
Nov 2025

javascript-hyperion-quantumfoam-rate-limiter

npm

MAL-2025-187598

Malicious code in javascript-hyperion-quantumfoam-rate-limiter (npm)

Malware
Nov 2025

capella-yaml-innercore-hermes

npm

MAL-2025-186002

Malicious code in capella-yaml-innercore-hermes (npm)

Malware
Nov 2025
Showing 18001 - 18024 of 233,157
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001