Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,237
Total Incidents

user-refactor-cluster-transpile-eta

npm

MAL-2025-190126

Malicious code in user-refactor-cluster-transpile-eta (npm)

Malware
Nov 2025

umbriel-gulp-sqlite-shelljs

npm

MAL-2025-190045

Malicious code in umbriel-gulp-sqlite-shelljs (npm)

Malware
Nov 2025

css-minimizer-webpack-plugin-superagent-npm-private

npm

MAL-2025-186424

Malicious code in css-minimizer-webpack-plugin-superagent-npm-private (npm)

Malware
Nov 2025

tethys-deimos-spinner-eslint-config

npm

MAL-2025-189904

Malicious code in tethys-deimos-spinner-eslint-config (npm)

Malware
Nov 2025

husky-build-toml-troposphere

npm

MAL-2025-187390

Malicious code in husky-build-toml-troposphere (npm)

Malware
Nov 2025

nebula-dactyl-avior-thermosphere

npm

MAL-2025-188199

Malicious code in nebula-dactyl-avior-thermosphere (npm)

Malware
Nov 2025

abstract-hash-key-report-load

npm

MAL-2025-185366

Malicious code in abstract-hash-key-report-load (npm)

Malware
Nov 2025

cors-standard-epimetheus-telesto

npm

MAL-2025-186319

Malicious code in cors-standard-epimetheus-telesto (npm)

Malware
Nov 2025

babel-singularity-got-hadron

npm

MAL-2025-185724

Malicious code in babel-singularity-got-hadron (npm)

Malware
Nov 2025

cryptography-cross-env-google-yildun

npm

MAL-2025-186403

Malicious code in cryptography-cross-env-google-yildun (npm)

Malware
Nov 2025

warp-hyperion-quasar-quark

npm

MAL-2025-190222

Malicious code in warp-hyperion-quasar-quark (npm)

Malware
Nov 2025

koa-callback-postcss-loader-webdriver-manager

npm

MAL-2025-187698

Malicious code in koa-callback-postcss-loader-webdriver-manager (npm)

Malware
Nov 2025

transhumanism-auriga-markdownlint-canopus

npm

MAL-2025-189971

Malicious code in transhumanism-auriga-markdownlint-canopus (npm)

Malware
Nov 2025

cors-centaurus-electron-builder-galaxy

npm

MAL-2025-186316

Malicious code in cors-centaurus-electron-builder-galaxy (npm)

Malware
Nov 2025

nuxtjs-steganography-dynamo-rocket

npm

MAL-2025-188376

Malicious code in nuxtjs-steganography-dynamo-rocket (npm)

Malware
Nov 2025

cressida-yakutsk-zephyr-rollup

npm

MAL-2025-186372

Malicious code in cressida-yakutsk-zephyr-rollup (npm)

Malware
Nov 2025

scripts-geckodriver-jwt-draco

npm

MAL-2025-189386

Malicious code in scripts-geckodriver-jwt-draco (npm)

Malware
Nov 2025

jovian-postgres-webdriver-mocha-await

npm

MAL-2025-187613

Malicious code in jovian-postgres-webdriver-mocha-await (npm)

Malware
Nov 2025

geckodriver-slidev-protractor-hermes

npm

MAL-2025-187132

Malicious code in geckodriver-slidev-protractor-hermes (npm)

Malware
Nov 2025

eslint-config-geckodriver-algol-middleware

npm

MAL-2025-186834

Malicious code in eslint-config-geckodriver-algol-middleware (npm)

Malware
Nov 2025

init-charon-terser-upgrade

npm

MAL-2025-187474

Malicious code in init-charon-terser-upgrade (npm)

Malware
Nov 2025

orogeny-quark-archaeoastronomy-auth

npm

MAL-2025-188480

Malicious code in orogeny-quark-archaeoastronomy-auth (npm)

Malware
Nov 2025

entanglement-cybernetics-process-capella

npm

MAL-2025-186757

Malicious code in entanglement-cybernetics-process-capella (npm)

Malware
Nov 2025

redgiant-gammarayburst-event-miranda

npm

MAL-2025-189101

Malicious code in redgiant-gammarayburst-event-miranda (npm)

Malware
Nov 2025
Showing 22153 - 22176 of 241,237
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001