Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    heims

    Malicious code in heims (PyPI)

    25 May 2026
    No fix available

    @refactco/refact-os

    Malicious code in @refactco/refact-os (npm)

    25 May 2026
    No fix available

    system-user-identifier-cli

    Malicious code in system-user-identifier-cli (npm)

    25 May 2026
    No fix available

    your-unique-package-name1

    Malicious code in your-unique-package-name1 (npm)

    25 May 2026
    No fix available

    npm-builderio-qwik-poc

    Malicious code in npm-builderio-qwik-poc (npm)

    25 May 2026
    No fix available

    pylogkt

    Malicious code in pylogkt (PyPI)

    25 May 2026
    No fix available

    @zizie071/libsignal-node

    Malicious code in @zizie071/libsignal-node (npm)

    25 May 2026
    No fix available

    @stockrepublic/republic-components

    Malicious code in @stockrepublic/republic-components (npm)

    24 May 2026
    No fix available

    shiroai

    Malicious code in shiroai (npm)

    24 May 2026
    No fix available

    cxpher-linux-arm32

    Malicious code in cxpher-linux-arm32 (npm)

    24 May 2026
    No fix available

    clipboard-guardian

    Malicious code in clipboard-guardian (npm)

    24 May 2026
    No fix available

    polymarket-data-fetcher

    Malicious code in polymarket-data-fetcher (PyPI)

    24 May 2026
    No fix available

    polydata-analytics

    Malicious code in polydata-analytics (PyPI)

    24 May 2026
    No fix available

    sysnode

    Malicious code in sysnode (npm)

    24 May 2026
    No fix available

    class-weaver

    Malicious code in class-weaver (npm)

    24 May 2026
    No fix available

    vite-plugin-css-blend

    Malicious code in vite-plugin-css-blend (npm)

    24 May 2026
    No fix available

    whatsfly-labfox

    Malicious code in whatsfly-labfox (PyPI)

    24 May 2026
    No fix available

    class-blend

    Malicious code in class-blend (npm)

    24 May 2026
    No fix available

    power-platform-playwright-toolkit

    Malicious code in power-platform-playwright-toolkit (npm)

    24 May 2026
    No fix available

    cami-design

    Malicious code in cami-design (npm)

    24 May 2026
    No fix available

    react-malicious-clone

    Malicious code in react-malicious-clone (npm)

    24 May 2026
    No fix available

    @jonusnattapong/claudecode

    Malicious code in @jonusnattapong/claudecode (npm)

    24 May 2026
    No fix available

    power-apps

    Malicious code in power-apps (npm)

    24 May 2026
    No fix available

    twokey

    Malicious code in twokey (npm)

    24 May 2026
    No fix available

    wallet-agent-ai

    Malicious code in wallet-agent-ai (npm)

    24 May 2026
    No fix available

    harness-skil

    Malicious code in harness-skil (npm)

    24 May 2026
    No fix available

    tailwind-typography-stylecss

    Malicious code in tailwind-typography-stylecss (npm)

    24 May 2026
    No fix available

    license-checker-plus

    Malicious code in license-checker-plus (npm)

    24 May 2026
    No fix available

    solidity-coverage-plus

    Malicious code in solidity-coverage-plus (npm)

    24 May 2026
    No fix available

    freertc

    Malicious code in freertc (npm)

    24 May 2026
    No fix available

    env-loader-cli

    Malicious code in env-loader-cli (PyPI)

    24 May 2026
    No fix available

    data-pipeline-check

    Malicious code in data-pipeline-check (PyPI)

    24 May 2026
    No fix available

    git-config-sync

    Malicious code in git-config-sync (PyPI)

    24 May 2026
    No fix available

    hardhat-gas-analytics

    Malicious code in hardhat-gas-analytics (npm)

    23 May 2026
    No fix available

    openprompt-lang

    Malicious code in openprompt-lang (npm)

    23 May 2026
    No fix available

    @gbrlxvii/ts-project-lint

    Malicious code in @gbrlxvii/ts-project-lint (npm)

    23 May 2026
    No fix available

    @digicroz/typed-api-kit

    Malicious code in @digicroz/typed-api-kit (npm)

    23 May 2026
    No fix available

    fastapi

    Malicious code in fastapi (PyPI)

    23 May 2026
    No fix available

    mistral-evals

    Malicious code in mistral-evals (PyPI)

    23 May 2026
    No fix available

    pewter-constantstest

    Malicious code in pewter-constantstest (npm)

    23 May 2026
    No fix available

    @audience-common-ui/components

    Malicious code in @audience-common-ui/components (npm)

    23 May 2026
    No fix available

    @dreamlake/lakeshore

    Malicious code in @dreamlake/lakeshore (npm)

    23 May 2026
    No fix available

    @newline53/newline-ts-sdk

    Malicious code in @newline53/newline-ts-sdk (npm)

    23 May 2026
    No fix available

    pewter-constants

    Malicious code in pewter-constants (npm)

    23 May 2026
    No fix available

    midpatch

    Malicious code in midpatch (npm)

    23 May 2026
    No fix available

    asavie-ui

    Malicious code in asavie-ui (npm)

    23 May 2026
    No fix available

    discovery-build

    Malicious code in discovery-build (npm)

    23 May 2026
    No fix available

    turbo-axios

    Malicious code in turbo-axios (npm)

    23 May 2026
    No fix available

    hiura-baileys

    Malicious code in hiura-baileys (npm)

    23 May 2026
    No fix available

    cosmosdb-server

    Malicious code in cosmosdb-server (npm)

    23 May 2026
    No fix available