Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    vulndify-mcp-server

    Malicious code in vulndify-mcp-server (PyPI)

    22 May 2026
    No fix available

    @shwfed/nuxt

    Malicious code in @shwfed/nuxt (npm)

    22 May 2026
    No fix available

    pypi-build-verifier

    Malicious code in pypi-build-verifier (npm)

    22 May 2026
    No fix available

    env-security-scanner

    Malicious code in env-security-scanner (npm)

    22 May 2026
    No fix available

    mev-shield

    Malicious code in mev-shield (npm)

    22 May 2026
    No fix available

    pylogft

    Malicious code in pylogft (PyPI)

    22 May 2026
    No fix available

    deploy-guard-check

    Malicious code in deploy-guard-check (npm)

    22 May 2026
    No fix available

    build-integrity-verify

    Malicious code in build-integrity-verify (npm)

    22 May 2026
    No fix available

    dependency-audit-tool

    Malicious code in dependency-audit-tool (npm)

    22 May 2026
    No fix available

    python-env-auditor

    Malicious code in python-env-auditor (npm)

    22 May 2026
    No fix available

    credential-verification-cli

    Malicious code in credential-verification-cli (npm)

    22 May 2026
    No fix available

    compliance-check-runner

    Malicious code in compliance-check-runner (npm)

    22 May 2026
    No fix available

    internallib_v493

    Malicious code in internallib_v493 (npm)

    22 May 2026
    No fix available

    audit-logsss

    Malicious code in audit-logsss (npm)

    22 May 2026
    No fix available

    @exocore/exocode

    Malicious code in @exocore/exocode (npm)

    22 May 2026
    No fix available

    pylogfmt

    Malicious code in pylogfmt (PyPI)

    22 May 2026
    No fix available

    allbridge-example-react

    Malicious code in allbridge-example-react (npm)

    22 May 2026
    No fix available

    ignite-market-contracts

    Malicious code in ignite-market-contracts (npm)

    22 May 2026
    No fix available

    ignite-market-contractstest

    Malicious code in ignite-market-contractstest (npm)

    22 May 2026
    No fix available

    mathepy

    Malicious code in mathepy (PyPI)

    21 May 2026
    No fix available

    crypt0co-walet-poc

    Malicious code in crypt0co-walet-poc (npm)

    21 May 2026
    No fix available

    fakehuop

    Malicious code in fakehuop (PyPI)

    21 May 2026
    No fix available

    claude-content-writer

    Malicious code in claude-content-writer (npm)

    21 May 2026
    No fix available

    @rui.branco/sentry-mcp

    Malicious code in @rui.branco/sentry-mcp (npm)

    21 May 2026
    No fix available

    search-connector-template

    Malicious code in search-connector-template (npm)

    21 May 2026
    No fix available

    configcat-trello-powerup

    Malicious code in configcat-trello-powerup (npm)

    21 May 2026
    No fix available

    @remitee-money-transfer/rmt-base

    Malicious code in @remitee-money-transfer/rmt-base (npm)

    21 May 2026
    No fix available

    cryptoco-auth

    Malicious code in cryptoco-auth (npm)

    21 May 2026
    No fix available

    cloudsmith-vsc

    Malicious code in cloudsmith-vsc (npm)

    21 May 2026
    No fix available

    @ornexus/neocortex

    Malicious code in @ornexus/neocortex (npm)

    21 May 2026
    No fix available

    fnd-stores

    Malicious code in fnd-stores (npm)

    21 May 2026
    No fix available

    pubnub-moderation-tool

    Malicious code in pubnub-moderation-tool (npm)

    21 May 2026
    No fix available

    moneykit-cardano-demo

    Malicious code in moneykit-cardano-demo (npm)

    21 May 2026
    No fix available

    chai-as-vite

    Malicious code in chai-as-vite (npm)

    21 May 2026
    No fix available

    @jaggle/resizeobserves

    Malicious code in @jaggle/resizeobserves (npm)

    21 May 2026
    No fix available

    @kyungseopk1m/holidays-kr

    Malicious code in @kyungseopk1m/holidays-kr (npm)

    21 May 2026
    No fix available

    maxixy-cli

    Malicious code in maxixy-cli (npm)

    21 May 2026
    No fix available

    chai-as-tuned

    Malicious code in chai-as-tuned (npm)

    21 May 2026
    No fix available

    @pulse-web-platform-core/scripts-loader

    Malicious code in @pulse-web-platform-core/scripts-loader (npm)

    21 May 2026
    No fix available

    veteran

    Malicious code in veteran (npm)

    21 May 2026
    No fix available

    tailwindcss-theme-custom

    Malicious code in tailwindcss-theme-custom (npm)

    21 May 2026
    No fix available

    tailwindcss-themers

    Malicious code in tailwindcss-themers (npm)

    21 May 2026
    No fix available

    celonix-otp-react

    Malicious code in celonix-otp-react (npm)

    21 May 2026
    No fix available

    json-spectaculation

    Malicious code in json-spectaculation (npm)

    21 May 2026
    No fix available

    veteran-proxy

    Malicious code in veteran-proxy (npm)

    21 May 2026
    No fix available

    utils-mf

    Malicious code in utils-mf (npm)

    21 May 2026
    No fix available

    pgrayy-wasmtime

    Malicious code in pgrayy-wasmtime (PyPI)

    21 May 2026
    No fix available

    @dekuzxc/nexca

    Malicious code in @dekuzxc/nexca (npm)

    21 May 2026
    No fix available

    @vino.tian/vibe-kanban

    Malicious code in @vino.tian/vibe-kanban (npm)

    21 May 2026
    No fix available

    lognest

    Malicious code in lognest (PyPI)

    21 May 2026
    No fix available