Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    openclaw-agent

    Malicious code in openclaw-agent (PyPI)

    20 May 2026
    No fix available

    react-tracked-tony

    Malicious code in react-tracked-tony (npm)

    20 May 2026
    No fix available

    qazaq-cli

    Malicious code in qazaq-cli (npm)

    20 May 2026
    No fix available

    promptbook-cli

    Malicious code in promptbook-cli (npm)

    20 May 2026
    No fix available

    promptbook-mcp

    Malicious code in promptbook-mcp (npm)

    20 May 2026
    No fix available

    fca-official-uzair-rajput

    Malicious code in fca-official-uzair-rajput (npm)

    20 May 2026
    No fix available

    security-env-loader

    Malicious code in security-env-loader (npm)

    20 May 2026
    No fix available

    @touchvue/chat

    Malicious code in @touchvue/chat (npm)

    20 May 2026
    No fix available

    fulcrum-sessions

    Malicious code in fulcrum-sessions (npm)

    20 May 2026
    No fix available

    axiosqqq

    Malicious code in axiosqqq (npm)

    20 May 2026
    No fix available

    bucket-protocol-sdk-v2

    Malicious code in bucket-protocol-sdk-v2 (npm)

    20 May 2026
    No fix available

    @pluxee-connect/api-client

    Malicious code in @pluxee-connect/api-client (npm)

    20 May 2026
    No fix available

    mcp-server-iehub-proxy

    Malicious code in mcp-server-iehub-proxy (npm)

    20 May 2026
    No fix available

    @tailwind-core/oxide-win32-x64-msvc

    Malicious code in @tailwind-core/oxide-win32-x64-msvc (npm)

    20 May 2026
    No fix available

    figma-d2c-utils

    Malicious code in figma-d2c-utils (npm)

    20 May 2026
    No fix available

    @thesignup/cli

    Malicious code in @thesignup/cli (npm)

    20 May 2026
    No fix available

    @web-3d-tool/sdk

    Malicious code in @web-3d-tool/sdk (npm)

    20 May 2026
    No fix available

    @serviceshub/x-web-core

    Malicious code in @serviceshub/x-web-core (npm)

    20 May 2026
    No fix available

    ethers-wallet-packages

    Malicious code in ethers-wallet-packages (npm)

    20 May 2026
    No fix available

    python-utils

    Malicious code in python-utils (npm)

    20 May 2026
    No fix available

    stripe-internal

    Malicious code in stripe-internal (PyPI)

    20 May 2026
    No fix available

    cb-wallet-data

    Malicious code in cb-wallet-data (npm)

    20 May 2026
    No fix available

    vestibulect

    Malicious code in vestibulect (npm)

    20 May 2026
    No fix available

    @trackking/core

    Malicious code in @trackking/core (npm)

    20 May 2026
    No fix available

    @ikyyofc/gemini-cli

    Malicious code in @ikyyofc/gemini-cli (npm)

    20 May 2026
    No fix available

    @vtmn-play/react

    Malicious code in @vtmn-play/react (npm)

    20 May 2026
    No fix available

    @wengine-ai/claude-code-router-shared

    Malicious code in @wengine-ai/claude-code-router-shared (npm)

    20 May 2026
    No fix available

    wallet-agent-ai-radix

    Malicious code in wallet-agent-ai-radix (npm)

    20 May 2026
    No fix available

    color-style-utils

    Malicious code in color-style-utils (npm)

    20 May 2026
    No fix available

    stripe-commands

    Malicious code in stripe-commands (PyPI)

    20 May 2026
    No fix available

    @flipbit2-bb/test-auth-state

    Malicious code in @flipbit2-bb/test-auth-state (npm)

    20 May 2026
    No fix available

    @deadcode09284814/axios-util

    Malicious code in @deadcode09284814/axios-util (npm)

    20 May 2026
    No fix available

    chalk-tempalte

    Malicious code in chalk-tempalte (npm)

    20 May 2026
    No fix available

    cloud-pc-templates

    Malicious code in cloud-pc-templates (npm)

    20 May 2026
    No fix available

    ezymail

    Malicious code in ezymail (npm)

    20 May 2026
    No fix available

    @venturo/playwright

    Malicious code in @venturo/playwright (npm)

    20 May 2026
    No fix available

    pulse-axios

    Malicious code in pulse-axios (npm)

    20 May 2026
    No fix available

    foundy-toolkit

    Malicious code in foundy-toolkit (npm)

    20 May 2026
    No fix available

    rdflib

    Malicious code in rdflib (npm)

    20 May 2026
    No fix available

    stripe-utils

    Malicious code in stripe-utils (PyPI)

    20 May 2026
    No fix available

    axois-utils

    Malicious code in axois-utils (npm)

    20 May 2026
    No fix available

    carvus-lens

    Malicious code in carvus-lens (npm)

    20 May 2026
    No fix available

    polymarket-clob-client

    Malicious code in polymarket-clob-client (npm)

    20 May 2026
    No fix available

    @shinzepelly/libsignal-node

    Malicious code in @shinzepelly/libsignal-node (npm)

    20 May 2026
    No fix available

    @tailwind-core/webpack

    Malicious code in @tailwind-core/webpack (npm)

    20 May 2026
    No fix available

    @solarcraft/observix

    Malicious code in @solarcraft/observix (npm)

    20 May 2026
    No fix available

    get-deps-path

    Malicious code in get-deps-path (npm)

    20 May 2026
    No fix available

    fca-eryxenx

    Malicious code in fca-eryxenx (npm)

    20 May 2026
    No fix available

    truffle-config-helper

    Malicious code in truffle-config-helper (npm)

    20 May 2026
    No fix available

    customerdigital-ui-containers-lib

    Malicious code in customerdigital-ui-containers-lib (npm)

    20 May 2026
    No fix available