Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

233,220
Total Incidents

vuepress-toml-magellan-rimraf

npm

MAL-2025-190194

Malicious code in vuepress-toml-magellan-rimraf (npm)

Malware
Nov 2025

commitlint-chalk-neptune-auriga

npm

MAL-2025-186247

Malicious code in commitlint-chalk-neptune-auriga (npm)

Malware
Nov 2025

mantle-achernar-kinetic-whitedwarf

npm

MAL-2025-187917

Malicious code in mantle-achernar-kinetic-whitedwarf (npm)

Malware
Nov 2025

zenith-cosmiconfig-miranda-standard

npm

MAL-2025-190446

Malicious code in zenith-cosmiconfig-miranda-standard (npm)

Malware
Nov 2025

node-mu-private-new-runtime

npm

MAL-2025-188312

Malicious code in node-mu-private-new-runtime (npm)

Malware
Nov 2025

xenon-apex-ultra-zenith

npm

MAL-2025-190368

Malicious code in xenon-apex-ultra-zenith (npm)

Malware
Nov 2025

neutronstar-quark-dotenv-safe-koa

npm

MAL-2025-188253

Malicious code in neutronstar-quark-dotenv-safe-koa (npm)

Malware
Nov 2025

taphonomy-commitlint-kardashevscale-loglevel

npm

MAL-2025-189804

Malicious code in taphonomy-commitlint-kardashevscale-loglevel (npm)

Malware
Nov 2025

gemini-postgres-rehype-sagitta

npm

MAL-2025-187142

Malicious code in gemini-postgres-rehype-sagitta (npm)

Malware
Nov 2025

antares-apex-robotics-quito

npm

MAL-2025-185460

Malicious code in antares-apex-robotics-quito (npm)

Malware
Nov 2025

wasat-pulsar-exobiology-link

npm

MAL-2025-190235

Malicious code in wasat-pulsar-exobiology-link (npm)

Malware
Nov 2025

daemon-old-mu-interpret-deserialize

npm

MAL-2025-186466

Malicious code in daemon-old-mu-interpret-deserialize (npm)

Malware
Nov 2025

vortex-auth0-string-holography

npm

MAL-2025-190185

Malicious code in vortex-auth0-string-holography (npm)

Malware
Nov 2025

dotenv-hexo-apollo-cryonics

npm

MAL-2025-186612

Malicious code in dotenv-hexo-apollo-cryonics (npm)

Malware
Nov 2025

mini-css-extract-plugin-meissa-chai-ganymede

npm

MAL-2025-188047

Malicious code in mini-css-extract-plugin-meissa-chai-ganymede (npm)

Malware
Nov 2025

async-cressida-umbra-vuepress

npm

MAL-2025-185614

Malicious code in async-cressida-umbra-vuepress (npm)

Malware
Nov 2025

alpha-view-grep-abstract-pipe

npm

MAL-2025-185435

Malicious code in alpha-view-grep-abstract-pipe (npm)

Malware
Nov 2025

betelgeuse-dactyl-rollup-plugin-quasarjet

npm

MAL-2025-185790

Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet (npm)

Malware
Nov 2025

await-husky-electron-builder-superagent

npm

MAL-2025-185694

Malicious code in await-husky-electron-builder-superagent (npm)

Malware
Nov 2025

janus-neptune-spectron-publish

npm

MAL-2025-187576

Malicious code in janus-neptune-spectron-publish (npm)

Malware
Nov 2025

sanitize-analyze-benchmark-deploy-encode

npm

MAL-2025-189345

Malicious code in sanitize-analyze-benchmark-deploy-encode (npm)

Malware
Nov 2025

cryovolcano-miranda-blueshift-rimraf

npm

MAL-2025-186400

Malicious code in cryovolcano-miranda-blueshift-rimraf (npm)

Malware
Nov 2025

ethology-paleontology-nova-archaeoastronomy

npm

MAL-2025-186860

Malicious code in ethology-paleontology-nova-archaeoastronomy (npm)

Malware
Nov 2025

mira-flare-xanadu-pavo

npm

MAL-2025-188057

Malicious code in mira-flare-xanadu-pavo (npm)

Malware
Nov 2025
Showing 18337 - 18360 of 233,220
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001