Malicious Packages

Malicious code in osep-react-antd (npm)

Malicious code in osep-api-hub-service-client-v1 (npm)

Malicious code in swift-optimizer (npm)

Malicious code in @cloudways-lab/unified-design-system (npm)

Malicious code in @citi-icg-171632/citicms-repo-component (npm)

Malicious code in pulumi-vcd (PyPI)

Malicious code in ml2000 (PyPI)

Malicious code in share-anything-cli (npm)

Malicious code in cdk-sagemaker-notebook-workflow (npm)

Malicious code in @tmecontinue/claude (npm)

Malicious code in codebuff-cli (npm)

Malicious code in finkrouter (npm)

Malicious code in logger-draft (npm)

Malicious code in @thebros/create-benjamin (npm)

Malicious code in reactive-cdk-app (npm)

Malicious code in @inetafrica/open-claudia (npm)

Malicious code in @pisell/pisellos (npm)

Malicious code in gt-tester-exp-profiler-exp-00000017 (PyPI)

Malicious code in kurumi-fca (npm)

Malicious code in gt-tester-exp-profiler-exp-00000015 (PyPI)

Malicious code in sklern (PyPI)

Malicious code in @euqns/nudge-mcp (npm)

Malicious code in get-package-lint (npm)

Malicious code in skipshot-agent (npm)

Malicious code in lynx-keeper-cli (npm)

Malicious code in xy-ai-chat (npm)

Malicious code in @43uh3ig43/telemetry-client (npm)

Malicious code in qaq-core-util-v2 (npm)

Malicious code in bingocode (npm)

Malicious code in @onerjs/procedural-textures (npm)

Malicious code in @druids/ui (npm)

Malicious code in harmony-enablers-test-2026 (npm)

Malicious code in wrld-dev (npm)

Malicious code in @asura21232/fca-unofficial-nextgen (npm)

Malicious code in acc-document-editing (npm)

Malicious code in vulndify-mcp-server (PyPI)

Malicious code in @shwfed/nuxt (npm)

Malicious code in pypi-build-verifier (npm)

Malicious code in env-security-scanner (npm)

Malicious code in mev-shield (npm)

Malicious code in pylogft (PyPI)

Malicious code in deploy-guard-check (npm)

Malicious code in build-integrity-verify (npm)

Malicious code in dependency-audit-tool (npm)

Malicious code in python-env-auditor (npm)

Malicious code in credential-verification-cli (npm)

Malicious code in compliance-check-runner (npm)

Malicious code in internallib_v493 (npm)

Malicious code in audit-logsss (npm)

Malicious code in @exocore/exocode (npm)