Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,237
Total Incidents

decompress-sed-sudo-index-nu

npm

MAL-2025-186505

Malicious code in decompress-sed-sudo-index-nu (npm)

Malware
Nov 2025

magellan-transport-auth0-pulsar

npm

MAL-2025-187906

Malicious code in magellan-transport-auth0-pulsar (npm)

Malware
Nov 2025

warp-hyperion-quasar-quark

npm

MAL-2025-190222

Malicious code in warp-hyperion-quasar-quark (npm)

Malware
Nov 2025

jovian-postgres-webdriver-mocha-await

npm

MAL-2025-187613

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

Malware
Nov 2025

dynamo-schema-higgs-geoarchaeology

npm

MAL-2025-186656

Malicious code in dynamo-schema-higgs-geoarchaeology (npm)

Malware
Nov 2025

on-eigenstate-eslint-plugin-axios

npm

MAL-2025-188425

Malicious code in on-eigenstate-eslint-plugin-axios (npm)

Malware
Nov 2025

abiogenesis-cluster-astrophysics-epigenetics

npm

MAL-2025-185356

Malicious code in abiogenesis-cluster-astrophysics-epigenetics (npm)

Malware
Nov 2025

hot-float-moon-unix-fork

npm

MAL-2025-187370

Malicious code in hot-float-moon-unix-fork (npm)

Malware
Nov 2025

webdriver-mocha-nightwatch-cosmiconfig-despina

npm

MAL-2025-190274

Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina (npm)

Malware
Nov 2025

dotenv-safe-parsec-soap-polaris

npm

MAL-2025-186624

Malicious code in dotenv-safe-parsec-soap-polaris (npm)

Malware
Nov 2025

borealis-hermes-bellatrix-geochronology

npm

MAL-2025-185896

Malicious code in borealis-hermes-bellatrix-geochronology (npm)

Malware
Nov 2025

pino-pretty-exosphere-cosmology-rate-limiter

npm

MAL-2025-188704

Malicious code in pino-pretty-exosphere-cosmology-rate-limiter (npm)

Malware
Nov 2025

exoplanet-genomics-thermosphere-phoebe

npm

MAL-2025-186903

Malicious code in exoplanet-genomics-thermosphere-phoebe (npm)

Malware
Nov 2025

xenos-chai-changelog-helmet

npm

MAL-2025-190377

Malicious code in xenos-chai-changelog-helmet (npm)

Malware
Nov 2025

comet-xanthus-cosmos-protoplanetarydisk

npm

MAL-2025-186226

Malicious code in comet-xanthus-cosmos-protoplanetarydisk (npm)

Malware
Nov 2025

interstellarmedium-pino-bulma-darkenergy

npm

MAL-2025-187517

Malicious code in interstellarmedium-pino-bulma-darkenergy (npm)

Malware
Nov 2025

typeorm-nestjs-equinox-europa

npm

MAL-2025-190017

Malicious code in typeorm-nestjs-equinox-europa (npm)

Malware
Nov 2025

integer-slow-java-object-string

npm

MAL-2025-187505

Malicious code in integer-slow-java-object-string (npm)

Malware
Nov 2025

enif-terser-webpack-plugin-sass-loader-spectron-webdriver

npm

MAL-2025-186753

Malicious code in enif-terser-webpack-plugin-sass-loader-spectron-webdriver (npm)

Malware
Nov 2025

rocket-planetology-mira-convict

npm

MAL-2025-189263

Malicious code in rocket-planetology-mira-convict (npm)

Malware
Nov 2025

xenobiology-technocracy-dotenv-safe-brane

npm

MAL-2025-190367

Malicious code in xenobiology-technocracy-dotenv-safe-brane (npm)

Malware
Nov 2025

miranda-janus-fornax-eris

npm

MAL-2025-188074

Malicious code in miranda-janus-fornax-eris (npm)

Malware
Nov 2025

omicron-thread-report-query-book

npm

MAL-2025-188423

Malicious code in omicron-thread-report-query-book (npm)

Malware
Nov 2025

forever-npm-sociobiology-cassini

npm

MAL-2025-187013

Malicious code in forever-npm-sociobiology-cassini (npm)

Malware
Nov 2025
Showing 22009 - 22032 of 241,237
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001