Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,241
Total Incidents

deimos-iota-luminescence-geochemistry

npm

MAL-2025-186516

Malicious code in deimos-iota-luminescence-geochemistry (npm)

Malware
Nov 2025

tachyon-lacerta-relay-mdx

npm

MAL-2025-189798

Malicious code in tachyon-lacerta-relay-mdx (npm)

Malware
Nov 2025

nodemon-terser-webpack-plugin-private-mantle

npm

MAL-2025-188337

Malicious code in nodemon-terser-webpack-plugin-private-mantle (npm)

Malware
Nov 2025

cypress-geckodriver-vulcan-metalsmith

npm

MAL-2025-186448

Malicious code in cypress-geckodriver-vulcan-metalsmith (npm)

Malware
Nov 2025

hydra-hawkingradiation-markdownlint-mini-css-extract-plugin

npm

MAL-2025-187398

Malicious code in hydra-hawkingradiation-markdownlint-mini-css-extract-plugin (npm)

Malware
Nov 2025

kernel-stack-grep-zero-table

npm

MAL-2025-187678

Malicious code in kernel-stack-grep-zero-table (npm)

Malware
Nov 2025

frontend-uninstall-foundation-prettier

npm

MAL-2025-187053

Malicious code in frontend-uninstall-foundation-prettier (npm)

Malware
Nov 2025

cat-big-code-star-encrypt

npm

MAL-2025-186028

Malicious code in cat-big-code-star-encrypt (npm)

Malware
Nov 2025

quasar-capella-bootstrap-kastra

npm

MAL-2025-189029

Malicious code in quasar-capella-bootstrap-kastra (npm)

Malware
Nov 2025

signal-view-stub-interface-async

npm

MAL-2025-189498

Malicious code in signal-view-stub-interface-async (npm)

Malware
Nov 2025

koa-version-scorpius-ceres

npm

MAL-2025-187703

Malicious code in koa-version-scorpius-ceres (npm)

Malware
Nov 2025

upsilon-sed-authenticate-await-tau

npm

MAL-2025-190096

Malicious code in upsilon-sed-authenticate-await-tau (npm)

Malware
Nov 2025

express-buffer-quasar-reveal-md

npm

MAL-2025-186926

Malicious code in express-buffer-quasar-reveal-md (npm)

Malware
Nov 2025

big-static-delta-private-cache

npm

MAL-2025-185805

Malicious code in big-static-delta-private-cache (npm)

Malware
Nov 2025

authorize-route-signal-grid-cache

npm

MAL-2025-185679

Malicious code in authorize-route-signal-grid-cache (npm)

Malware
Nov 2025

gulp-javascript-carpo-markdown-pdf

npm

MAL-2025-187251

Malicious code in gulp-javascript-carpo-markdown-pdf (npm)

Malware
Nov 2025

lyra-fomalhaut-arcturus-enceladus

npm

MAL-2025-187890

Malicious code in lyra-fomalhaut-arcturus-enceladus (npm)

Malware
Nov 2025

oscillation-oscillation-accretion-comet

npm

MAL-2025-188485

Malicious code in oscillation-oscillation-accretion-comet (npm)

Malware
Nov 2025

bad-old-deserialize-bundle-boolean

npm

MAL-2025-185737

Malicious code in bad-old-deserialize-bundle-boolean (npm)

Malware
Nov 2025

atlas-nanotechnology-polaris-meissa

npm

MAL-2025-185638

Malicious code in atlas-nanotechnology-polaris-meissa (npm)

Malware
Nov 2025

protractor-stream-frontend-dynamo

npm

MAL-2025-188902

Malicious code in protractor-stream-frontend-dynamo (npm)

Malware
Nov 2025

aurora-exec-nebula-titan

npm

MAL-2025-185653

Malicious code in aurora-exec-nebula-titan (npm)

Malware
Nov 2025

eslint-loop-meteor-jasmine

npm

MAL-2025-186840

Malicious code in eslint-loop-meteor-jasmine (npm)

Malware
Nov 2025

exobiology-adonis-paleoceanography-biotechnology

npm

MAL-2025-186898

Malicious code in exobiology-adonis-paleoceanography-biotechnology (npm)

Malware
Nov 2025
Showing 23641 - 23664 of 241,241
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001