Malicious Packages

Malicious code in params-valid-js (npm)

Malicious code in tobihook (PyPI)

Malicious code in node-path-utils (npm)

Malicious code in req-parmas-valid (npm)

Malicious code in sheratan_test_p (npm)

Malicious code in pathfix (npm)

Malicious code in ogd-analytics (npm)

Malicious code in classbreeze-utils (npm)

Malicious code in easy-day-js (npm)

Malicious code in @public-for-cdao/hooks (npm)

Malicious code in cryptodao-contracts (npm)

Malicious code in cryptodao-core (npm)

Malicious code in cryptodao-bot (npm)

Malicious code in cryptodao-utils (npm)

Malicious code in cryptodao-signer (npm)

Malicious code in @public-for-cdao/abi (npm)

Malicious code in @public-for-cdao/api (npm)

Malicious code in @public-for-cdao/token (npm)

Malicious code in @public-for-cdao/common (npm)

Malicious code in @public-for-cdao/config (npm)

Malicious code in @public-for-cdao/types (npm)

Malicious code in cryptodao-deploy (npm)

Malicious code in cryptodao-config (npm)

Malicious code in cryptodao-types (npm)

Malicious code in cryptodao-backend (npm)

Malicious code in cryptodao-sdk (npm)

Malicious code in @mastra/posthog (npm)

Malicious code in @mastra/clickhouse (npm)

Malicious code in @mastra/inngest (npm)

Malicious code in @mastra/braintrust (npm)

Malicious code in @mastra/rag (npm)

Malicious code in @mastra/mongodb (npm)

Malicious code in @mastra/fastify (npm)

Malicious code in @mastra/mcp-docs-server (npm)

Malicious code in @mastra/langsmith (npm)

Malicious code in @mastra/sentry (npm)

Malicious code in @mastra/s3 (npm)

Malicious code in @mastra/fastembed (npm)

Malicious code in @mastra/auth (npm)

Malicious code in @mastra/hono (npm)

Malicious code in @mastra/datadog (npm)

Malicious code in @mastra/editor (npm)

Malicious code in @mastra/otel-bridge (npm)

Malicious code in @mastra/dynamodb (npm)

Malicious code in @mastra/duckdb (npm)

Malicious code in @mastra/schema-compat (npm)

Malicious code in @mastra/evals (npm)

Malicious code in @mastra/langfuse (npm)

Malicious code in @mastra/ai-sdk (npm)

Malicious code in @mastra/pg (npm)