Supply Chain Incidents

Malicious packages, backdoors, typosquats, and dependency confusion attacks

241,266
Total Incidents

authenticate-function-scale-cloud-socket

npm

MAL-2025-185670

Malicious code in authenticate-function-scale-cloud-socket (npm)

Malware
Nov 2025

mu-slow-star-promise-eta

npm

MAL-2025-188134

Malicious code in mu-slow-star-promise-eta (npm)

Malware
Nov 2025

eigenstate-auriga-module-chromedriver

npm

MAL-2025-186684

Malicious code in eigenstate-auriga-module-chromedriver (npm)

Malware
Nov 2025

solarnebula-nextjs-start-request

npm

MAL-2025-189585

Malicious code in solarnebula-nextjs-start-request (npm)

Malware
Nov 2025

sirius-darkmatter-lint-staged-cli

npm

MAL-2025-189515

Malicious code in sirius-darkmatter-lint-staged-cli (npm)

Malware
Nov 2025

cassini-socketio-concurrently-forever

npm

MAL-2025-186016

Malicious code in cassini-socketio-concurrently-forever (npm)

Malware
Nov 2025

paleoclimatology-cosmogenic-crust-kardashevscale

npm

MAL-2025-188506

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale (npm)

Malware
Nov 2025

cluster-volcanology-eslint-plugin-singularity

npm

MAL-2025-186189

Malicious code in cluster-volcanology-eslint-plugin-singularity (npm)

Malware
Nov 2025

command-axios-asteroid-carina

npm

MAL-2025-186227

Malicious code in command-axios-asteroid-carina (npm)

Malware
Nov 2025

fetch-charon-callisto-meissa

npm

MAL-2025-186958

Malicious code in fetch-charon-callisto-meissa (npm)

Malware
Nov 2025

sagitta-tachyon-rocket-nodemon

npm

MAL-2025-189324

Malicious code in sagitta-tachyon-rocket-nodemon (npm)

Malware
Nov 2025

spectron-csv-dynamo-bunyan

npm

MAL-2025-189606

Malicious code in spectron-csv-dynamo-bunyan (npm)

Malware
Nov 2025

writable-jovian-pino-markdownlint

npm

MAL-2025-190346

Malicious code in writable-jovian-pino-markdownlint (npm)

Malware
Nov 2025

meteor-spectron-webdriver-ignite-spawn

npm

MAL-2025-188033

Malicious code in meteor-spectron-webdriver-ignite-spawn (npm)

Malware
Nov 2025

paleontology-saturnology-standard-pipe

npm

MAL-2025-188536

Malicious code in paleontology-saturnology-standard-pipe (npm)

Malware
Nov 2025

cloud-fire-grid-kernel-cron

npm

MAL-2025-186173

Malicious code in cloud-fire-grid-kernel-cron (npm)

Malware
Nov 2025

weywot-resolvers-vuepress-rollup

npm

MAL-2025-190304

Malicious code in weywot-resolvers-vuepress-rollup (npm)

Malware
Nov 2025

reject-report-water-thread-parse

npm

MAL-2025-189150

Malicious code in reject-report-water-thread-parse (npm)

Malware
Nov 2025

local-terser-postcss-loader-eventhoriz

npm

MAL-2025-187841

Malicious code in local-terser-postcss-loader-eventhoriz (npm)

Malware
Nov 2025

pavo-paleoecology-pavo-kaus

npm

MAL-2025-188590

Malicious code in pavo-paleoecology-pavo-kaus (npm)

Malware
Nov 2025

io-cordelia-meteor-filament

npm

MAL-2025-187520

Malicious code in io-cordelia-meteor-filament (npm)

Malware
Nov 2025

hydrogeology-chariklo-pulsar-mini-css-extract-plugin

npm

MAL-2025-187405

Malicious code in hydrogeology-chariklo-pulsar-mini-css-extract-plugin (npm)

Malware
Nov 2025

vuetify-greatfilter-terser-dysonswarm

npm

MAL-2025-190198

Malicious code in vuetify-greatfilter-terser-dysonswarm (npm)

Malware
Nov 2025

table-private-module-zero-fork

npm

MAL-2025-189794

Malicious code in table-private-module-zero-fork (npm)

Malware
Nov 2025
Showing 23833 - 23856 of 241,266
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Setup in 5 minutesSOC 2 & ISO 27001