Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,266
Total Incidents

vega-panspermia-jwt-gemini

npm

MAL-2025-190134

Malicious code in vega-panspermia-jwt-gemini (npm)

Malware
Nov 2025

request-planetology-lynx-taphonomy

npm

MAL-2025-189190

Malicious code in request-planetology-lynx-taphonomy (npm)

Malware
Nov 2025

gemini-csv-gacrux-andromeda

npm

MAL-2025-187134

Malicious code in gemini-csv-gacrux-andromeda (npm)

Malware
Nov 2025

carina-solis-ultra-rimraf

npm

MAL-2025-186003

Malicious code in carina-solis-ultra-rimraf (npm)

Malware
Nov 2025

dotenv-parse-variables-biogeochemistry-version-betelgeuse

npm

MAL-2025-186616

Malicious code in dotenv-parse-variables-biogeochemistry-version-betelgeuse (npm)

Malware
Nov 2025

mu-slow-star-promise-eta

npm

MAL-2025-188134

Malicious code in mu-slow-star-promise-eta (npm)

Malware
Nov 2025

solarnebula-nextjs-start-request

npm

MAL-2025-189585

Malicious code in solarnebula-nextjs-start-request (npm)

Malware
Nov 2025

paleontology-saturnology-standard-pipe

npm

MAL-2025-188536

Malicious code in paleontology-saturnology-standard-pipe (npm)

Malware
Nov 2025

spectron-csv-dynamo-bunyan

npm

MAL-2025-189606

Malicious code in spectron-csv-dynamo-bunyan (npm)

Malware
Nov 2025

meteor-spectron-webdriver-ignite-spawn

npm

MAL-2025-188033

Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

Malware
Nov 2025

writable-jovian-pino-markdownlint

npm

MAL-2025-190346

Malicious code in writable-jovian-pino-markdownlint (npm)

Malware
Nov 2025

aquarius-slidev-equinox-procyon

npm

MAL-2025-185517

Malicious code in aquarius-slidev-equinox-procyon (npm)

Malware
Nov 2025

local-terser-postcss-loader-eventhoriz

npm

MAL-2025-187841

Malicious code in local-terser-postcss-loader-eventhoriz (npm)

Malware
Nov 2025

io-cordelia-meteor-filament

npm

MAL-2025-187520

Malicious code in io-cordelia-meteor-filament (npm)

Malware
Nov 2025

fork-eslint-slidev-chakra-ui

npm

MAL-2025-187018

Malicious code in fork-eslint-slidev-chakra-ui (npm)

Malware
Nov 2025

zenobia-sirius-paleoclimatology-enceladus

npm

MAL-2025-190456

Malicious code in zenobia-sirius-paleoclimatology-enceladus (npm)

Malware
Nov 2025

hydrogeology-chariklo-pulsar-mini-css-extract-plugin

npm

MAL-2025-187405

Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

Malware
Nov 2025

dagda-spawn-selenium-vega

npm

MAL-2025-186475

Malicious code in dagda-spawn-selenium-vega (npm)

Malware
Nov 2025

pavo-paleoecology-pavo-kaus

npm

MAL-2025-188590

Malicious code in pavo-paleoecology-pavo-kaus (npm)

Malware
Nov 2025

resonance-frontend-gatsby-accretion

npm

MAL-2025-189207

Malicious code in resonance-frontend-gatsby-accretion (npm)

Malware
Nov 2025

weywot-webdriver-mocha-loglevel-fornax

npm

MAL-2025-190307

Malicious code in weywot-webdriver-mocha-loglevel-fornax (npm)

Malware
Nov 2025

grus-neutrino-html-webpack-plugin-cluster

npm

MAL-2025-187243

Malicious code in grus-neutrino-html-webpack-plugin-cluster (npm)

Malware
Nov 2025

helios-cressida-biogeochemistry-halley

npm

MAL-2025-187315

Malicious code in helios-cressida-biogeochemistry-halley (npm)

Malware
Nov 2025

nebula-build-auth0-mui

npm

MAL-2025-188197

Malicious code in nebula-build-auth0-mui (npm)

Malware
Nov 2025
Showing 23809 - 23832 of 241,266
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001