Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,230
Total Incidents

expertsvc-onboard-offboard

npm

MAL-2025-190585

Malicious code in expertsvc-onboard-offboard (npm)

Malware
Nov 2025

identity-authn-core-ui

npm

MAL-2025-190586

Malicious code in identity-authn-core-ui (npm)

Malware
Nov 2025

@kiwiiw/ez-lib

npm

MAL-2025-190584

Malicious code in @kiwiiw/ez-lib (npm)

Malware
Nov 2025

com.unity.polyspatial.xr

npm

MAL-2025-190581

Malicious code in com.unity.polyspatial.xr (npm)

Malware
Nov 2025

just-a-calculator

npm

MAL-2025-190582

Malicious code in just-a-calculator (npm)

Malware
Nov 2025

node-calculator-fa00

npm

MAL-2025-190583

Malicious code in node-calculator-fa00 (npm)

Malware
Nov 2025

lululemon-b2b-utils

npm

MAL-2025-190580

Malicious code in lululemon-b2b-utils (npm)

Malware
Nov 2025

hellospa

npm

MAL-2025-190579

Malicious code in hellospa (npm)

Malware
Nov 2025

node-calculator-cf8c

npm

MAL-2025-190578

Malicious code in node-calculator-cf8c (npm)

Malware
Nov 2025

sitoogether

PyPI

MAL-2025-191870

Malicious code in sitoogether (PyPI)

Malware
Nov 2025

alicenpmpackage13

npm

MAL-2025-190577

Malicious code in alicenpmpackage13 (npm)

Malware
Nov 2025

alicenpmpackage1

npm

MAL-2025-190576

Malicious code in alicenpmpackage1 (npm)

Malware
Nov 2025

CodeInKlingon.git-worktree-menu

VSCode:https://open-vsx.org

MAL-2025-191158

Malicious code in CodeInKlingon.git-worktree-menu (VSCode:https://open-vsx.org)

Malware
Nov 2025

codejoy.codejoy-vscode-extension

VSCode:https://open-vsx.org

MAL-2025-191159

Malicious code in codejoy.codejoy-vscode-extension (VSCode:https://open-vsx.org)

Malware
Nov 2025

SIRILMP.dark-theme-sm

VSCode:https://open-vsx.org

MAL-2025-191167

Malicious code in SIRILMP.dark-theme-sm (VSCode:https://open-vsx.org)

Malware
Nov 2025

cline-ai-main.cline-ai-agent

VSCode

MAL-2025-191157

Malicious code in cline-ai-main.cline-ai-agent (VSCode)

Malware
Nov 2025

kleinesfilmroellchen.serenity-dsl-syntaxhighlight

VSCode:https://open-vsx.org

MAL-2025-191165

Malicious code in kleinesfilmroellchen.serenity-dsl-syntaxhighlight (VSCode:https://open-vsx.org)

Malware
Nov 2025

TretinV3.forts-api-extention

VSCode:https://open-vsx.org

MAL-2025-191170

Malicious code in TretinV3.forts-api-extention (VSCode:https://open-vsx.org)

Malware
Nov 2025

l-igh-t.vscode-theme-seti-folder

VSCode:https://open-vsx.org

MAL-2025-191166

Malicious code in l-igh-t.vscode-theme-seti-folder (VSCode:https://open-vsx.org)

Malware
Nov 2025

jeronimoekerdt.color-picker-universal

VSCode:https://open-vsx.org

MAL-2025-191163

Malicious code in jeronimoekerdt.color-picker-universal (VSCode:https://open-vsx.org)

Malware
Nov 2025

JScearcy.rust-doc-viewer

VSCode:https://open-vsx.org

MAL-2025-191164

Malicious code in JScearcy.rust-doc-viewer (VSCode:https://open-vsx.org)

Malware
Nov 2025

ginfuru.better-nunjucks

VSCode:https://open-vsx.org

MAL-2025-191161

Malicious code in ginfuru.better-nunjucks (VSCode:https://open-vsx.org)

Malware
Nov 2025

ellacrity.recoil

VSCode:https://open-vsx.org

MAL-2025-191160

Malicious code in ellacrity.recoil (VSCode:https://open-vsx.org)

Malware
Nov 2025

srcery-colors.srcery-colors

VSCode:https://open-vsx.org

MAL-2025-191169

Malicious code in srcery-colors.srcery-colors (VSCode:https://open-vsx.org)

Malware
Nov 2025
Showing 21217 - 21240 of 241,230
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001