Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    wm-plugin-json-conditions

    Malicious code in wm-plugin-json-conditions (npm)

    25 May 2026
    No fix available

    wm-plugin-create-iframe-capturing

    Malicious code in wm-plugin-create-iframe-capturing (npm)

    25 May 2026
    No fix available

    wm-plugin-set-walkme-language

    Malicious code in wm-plugin-set-walkme-language (npm)

    25 May 2026
    No fix available

    wm-plugin-open-teach-me-after-deployable-played

    Malicious code in wm-plugin-open-teach-me-after-deployable-played (npm)

    25 May 2026
    No fix available

    wm-w5g-preview

    Malicious code in wm-w5g-preview (npm)

    25 May 2026
    No fix available

    @agora-sdk/react-js

    Malicious code in @agora-sdk/react-js (npm)

    25 May 2026
    No fix available

    levex-press

    Malicious code in levex-press (npm)

    25 May 2026
    No fix available

    lint-builder-logger

    Malicious code in lint-builder-logger (npm)

    25 May 2026
    No fix available

    ts-big-lib

    Malicious code in ts-big-lib (npm)

    25 May 2026
    No fix available

    ts-relayer-client

    Malicious code in ts-relayer-client (npm)

    25 May 2026
    No fix available

    mcp-dashboards-shared

    Malicious code in mcp-dashboards-shared (npm)

    25 May 2026
    No fix available

    git-en-boite-inventory

    Malicious code in git-en-boite-inventory (npm)

    25 May 2026
    No fix available

    flow-parser-oxidized

    Malicious code in flow-parser-oxidized (npm)

    25 May 2026
    No fix available

    chai-as-float

    Malicious code in chai-as-float (npm)

    25 May 2026
    No fix available

    chai-as-buffer

    Malicious code in chai-as-buffer (npm)

    25 May 2026
    No fix available

    heims

    Malicious code in heims (PyPI)

    25 May 2026
    No fix available

    @refactco/refact-os

    Malicious code in @refactco/refact-os (npm)

    25 May 2026
    No fix available

    system-user-identifier-cli

    Malicious code in system-user-identifier-cli (npm)

    25 May 2026
    No fix available

    your-unique-package-name1

    Malicious code in your-unique-package-name1 (npm)

    25 May 2026
    No fix available

    npm-builderio-qwik-poc

    Malicious code in npm-builderio-qwik-poc (npm)

    25 May 2026
    No fix available

    pylogkt

    Malicious code in pylogkt (PyPI)

    25 May 2026
    No fix available

    @zizie071/libsignal-node

    Malicious code in @zizie071/libsignal-node (npm)

    25 May 2026
    No fix available

    @stockrepublic/republic-components

    Malicious code in @stockrepublic/republic-components (npm)

    24 May 2026
    No fix available

    shiroai

    Malicious code in shiroai (npm)

    24 May 2026
    No fix available

    cxpher-linux-arm32

    Malicious code in cxpher-linux-arm32 (npm)

    24 May 2026
    No fix available

    clipboard-guardian

    Malicious code in clipboard-guardian (npm)

    24 May 2026
    No fix available

    polymarket-data-fetcher

    Malicious code in polymarket-data-fetcher (PyPI)

    24 May 2026
    No fix available

    polydata-analytics

    Malicious code in polydata-analytics (PyPI)

    24 May 2026
    No fix available

    sysnode

    Malicious code in sysnode (npm)

    24 May 2026
    No fix available

    class-weaver

    Malicious code in class-weaver (npm)

    24 May 2026
    No fix available

    vite-plugin-css-blend

    Malicious code in vite-plugin-css-blend (npm)

    24 May 2026
    No fix available

    whatsfly-labfox

    Malicious code in whatsfly-labfox (PyPI)

    24 May 2026
    No fix available

    class-blend

    Malicious code in class-blend (npm)

    24 May 2026
    No fix available

    power-platform-playwright-toolkit

    Malicious code in power-platform-playwright-toolkit (npm)

    24 May 2026
    No fix available

    cami-design

    Malicious code in cami-design (npm)

    24 May 2026
    No fix available

    react-malicious-clone

    Malicious code in react-malicious-clone (npm)

    24 May 2026
    No fix available

    @jonusnattapong/claudecode

    Malicious code in @jonusnattapong/claudecode (npm)

    24 May 2026
    No fix available

    power-apps

    Malicious code in power-apps (npm)

    24 May 2026
    No fix available

    twokey

    Malicious code in twokey (npm)

    24 May 2026
    No fix available

    wallet-agent-ai

    Malicious code in wallet-agent-ai (npm)

    24 May 2026
    No fix available

    harness-skil

    Malicious code in harness-skil (npm)

    24 May 2026
    No fix available

    tailwind-typography-stylecss

    Malicious code in tailwind-typography-stylecss (npm)

    24 May 2026
    No fix available

    license-checker-plus

    Malicious code in license-checker-plus (npm)

    24 May 2026
    No fix available

    solidity-coverage-plus

    Malicious code in solidity-coverage-plus (npm)

    24 May 2026
    No fix available

    freertc

    Malicious code in freertc (npm)

    24 May 2026
    No fix available

    env-loader-cli

    Malicious code in env-loader-cli (PyPI)

    24 May 2026
    No fix available

    data-pipeline-check

    Malicious code in data-pipeline-check (PyPI)

    24 May 2026
    No fix available

    git-config-sync

    Malicious code in git-config-sync (PyPI)

    24 May 2026
    No fix available

    hardhat-gas-analytics

    Malicious code in hardhat-gas-analytics (npm)

    23 May 2026
    No fix available

    openprompt-lang

    Malicious code in openprompt-lang (npm)

    23 May 2026
    No fix available