Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    crypto-hash-sdk

    Malicious code in crypto-hash-sdk (npm)

    19 May 2026
    No fix available

    xorma-js

    Malicious code in xorma-js (npm)

    19 May 2026
    No fix available

    qr-code-styling-temp

    Malicious code in qr-code-styling-temp (npm)

    19 May 2026
    No fix available

    alya-baileys

    Malicious code in alya-baileys (npm)

    19 May 2026
    No fix available

    whiteboard-agent

    Malicious code in whiteboard-agent (npm)

    19 May 2026
    No fix available

    claude-all-config

    Malicious code in claude-all-config (npm)

    19 May 2026
    No fix available

    @shadanai/openclaw

    Malicious code in @shadanai/openclaw (npm)

    19 May 2026
    No fix available

    @bonsai-ai/claude-code

    Malicious code in @bonsai-ai/claude-code (npm)

    19 May 2026
    No fix available

    corelia

    Malicious code in corelia (npm)

    19 May 2026
    No fix available

    @bonsai-ai/claude-code-win32-x64

    Malicious code in @bonsai-ai/claude-code-win32-x64 (npm)

    19 May 2026
    No fix available

    open-agents-ai

    Malicious code in open-agents-ai (npm)

    19 May 2026
    No fix available

    superacli

    Malicious code in superacli (npm)

    19 May 2026
    No fix available

    @citely/mcp-server

    Malicious code in @citely/mcp-server (npm)

    19 May 2026
    No fix available

    prettier-sdk

    Malicious code in prettier-sdk (npm)

    19 May 2026
    No fix available

    cheaty-sync-bot

    Malicious code in cheaty-sync-bot (npm)

    19 May 2026
    No fix available

    bytecore

    Malicious code in bytecore (npm)

    19 May 2026
    No fix available

    durabletask

    Malicious code in durabletask (PyPI)

    19 May 2026
    No fix available

    @mc-xp/mc-monolith-js-src-package

    Malicious code in @mc-xp/mc-monolith-js-src-package (npm)

    19 May 2026
    No fix available

    @piewasm/pie-web-npm-package

    Malicious code in @piewasm/pie-web-npm-package (npm)

    19 May 2026
    No fix available

    is-really-odd

    Malicious code in is-really-odd (npm)

    19 May 2026
    No fix available

    psxjson

    Malicious code in psxjson (npm)

    19 May 2026
    No fix available

    paysafe-gbp-virtual-assistant-lib-fe

    Malicious code in paysafe-gbp-virtual-assistant-lib-fe (npm)

    19 May 2026
    No fix available

    chai-as-attracted

    Malicious code in chai-as-attracted (npm)

    19 May 2026
    No fix available

    chai-as-vec

    Malicious code in chai-as-vec (npm)

    19 May 2026
    No fix available

    paysafe-gbp-virtual-terminal-lib-fe

    Malicious code in paysafe-gbp-virtual-terminal-lib-fe (npm)

    19 May 2026
    No fix available

    tarpackage

    Malicious code in tarpackage (PyPI)

    19 May 2026
    No fix available

    identitysecuretokenserv

    Malicious code in identitysecuretokenserv (npm)

    19 May 2026
    No fix available

    vfat-ai

    Malicious code in vfat-ai (PyPI)

    19 May 2026
    No fix available

    vfat

    Malicious code in vfat (PyPI)

    19 May 2026
    No fix available

    @apps-home-dashboard/events

    Malicious code in @apps-home-dashboard/events (npm)

    19 May 2026
    No fix available

    @cap-js/openapi

    Malicious code in @cap-js/openapi (npm)

    19 May 2026
    No fix available

    @openclaw-cn/cli

    Malicious code in @openclaw-cn/cli (npm)

    19 May 2026
    No fix available

    @openclaw-cn/feishu

    Malicious code in @openclaw-cn/feishu (npm)

    19 May 2026
    No fix available

    @openclaw-cn/libsignal

    Malicious code in @openclaw-cn/libsignal (npm)

    19 May 2026
    No fix available

    @openclaw-cn/toutiao-ops

    Malicious code in @openclaw-cn/toutiao-ops (npm)

    19 May 2026
    No fix available

    @starmind/collector-cli

    Malicious code in @starmind/collector-cli (npm)

    19 May 2026
    No fix available

    openclaw-cn

    Malicious code in openclaw-cn (npm)

    19 May 2026
    No fix available

    vfat-tools

    Malicious code in vfat-tools (npm)

    19 May 2026
    No fix available

    sickle-wrapper

    Malicious code in sickle-wrapper (npm)

    19 May 2026
    No fix available

    @antv/xflow-hook

    Malicious code in @antv/xflow-hook (npm)

    19 May 2026
    No fix available

    @lint-md/cli

    Malicious code in @lint-md/cli (npm)

    19 May 2026
    No fix available

    @lint-md/core

    Malicious code in @lint-md/core (npm)

    19 May 2026
    No fix available

    @lint-md/parser

    Malicious code in @lint-md/parser (npm)

    19 May 2026
    No fix available

    ai-figure

    Malicious code in ai-figure (npm)

    19 May 2026
    No fix available

    jest-random-mock

    Malicious code in jest-random-mock (npm)

    19 May 2026
    No fix available

    jest-url-loader

    Malicious code in jest-url-loader (npm)

    19 May 2026
    No fix available

    limit-size

    Malicious code in limit-size (npm)

    19 May 2026
    No fix available

    lint-md

    Malicious code in lint-md (npm)

    19 May 2026
    No fix available

    mcp-echarts

    Malicious code in mcp-echarts (npm)

    19 May 2026
    No fix available

    mcp-mermaid

    Malicious code in mcp-mermaid (npm)

    19 May 2026
    No fix available