Malicious Packages

Malicious code in @flcik/flick.js (npm)

Malicious code in fastify-bundler (npm)

Malicious code in @tqm-mfe/main (npm)

Malicious code in chai-as-sets (npm)

Malicious code in chai-as-auth (npm)

Malicious code in polymarket-bot-logger (npm)

Malicious code in nodemon-client (npm)

Malicious code in nodemon-eslint (npm)

Malicious code in nodemon-web (npm)

Malicious code in type-astr (npm)

Malicious code in type-swap (npm)

Malicious code in type-unique (npm)

Malicious code in nodemon-delog (npm)

Malicious code in nodemon-elint (npm)

Malicious code in chai-as-verified (npm)

Malicious code in node-fsagent (npm)

Malicious code in test_adminet (npm)

Malicious code in express-ini (npm)

Malicious code in filewisee (npm)

Malicious code in bubblestring (npm)

Malicious code in ddok-modal (npm)

Malicious code in n8n-nodes-rce-poc (npm)

Malicious code in gamified-trading-system (npm)

Malicious code in eslint-angular-react (npm)

Malicious code in express-bunker (npm)

Malicious code in @quukk/opencode-clawmessenger (npm)

Malicious code in @quickcall/krew (npm)

Malicious code in eth-lib-utils (npm)

Malicious code in insomnia-plugin-poc-m4gester-run (npm)

Malicious code in assertcoreutils (npm)

Malicious code in font-huge (npm)

Malicious code in @sqlite-panel/createsql (npm)

Malicious code in permcarmserver (npm)

Malicious code in permcserver (npm)

Malicious code in @omniwatch-wick/cli (npm)

Malicious code in @outsmartly/metaobjects (npm)

Malicious code in polymarket-stake-kelly-math-check (npm)

Malicious code in react-icons-svgo (npm)

Malicious code in browser-use-headless (PyPI)

Malicious code in node-fsmetrics-data (npm)

Malicious code in route-processor (npm)

Malicious code in node-fsmetrics-native (npm)

Malicious code in @sectest429/hello-npm-world (npm)

Malicious code in @torbeck/priority-queue (npm)

Malicious code in claude-team-tracker (npm)

Malicious code in @dervix/engine.io (npm)

Malicious code in @dervix/socket.io (npm)

Malicious code in @gleamkit/engine.io (npm)

Malicious code in @gleamkit/socket.io (npm)

Malicious code in loading-sessions (npm)