Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    wallet-backup-verifier

    Malicious code in wallet-backup-verifier (npm)

    20 May 2026
    No fix available

    encrata-cli

    Malicious code in encrata-cli (npm)

    20 May 2026
    No fix available

    naileys

    Malicious code in naileys (npm)

    20 May 2026
    No fix available

    @rspack-debug/core

    Malicious code in @rspack-debug/core (npm)

    20 May 2026
    No fix available

    libhmac

    Malicious code in libhmac (PyPI)

    20 May 2026
    No fix available

    tango-app-api-trax

    Malicious code in tango-app-api-trax (npm)

    20 May 2026
    No fix available

    bitrix24-tasks-mcp-server

    Malicious code in bitrix24-tasks-mcp-server (npm)

    20 May 2026
    No fix available

    @spcsn/taro-cli

    Malicious code in @spcsn/taro-cli (npm)

    20 May 2026
    No fix available

    yessir-node

    Malicious code in yessir-node (npm)

    20 May 2026
    No fix available

    klaudius

    Malicious code in klaudius (npm)

    20 May 2026
    No fix available

    svharness

    Malicious code in svharness (npm)

    20 May 2026
    No fix available

    gm-kilo

    Malicious code in gm-kilo (npm)

    20 May 2026
    No fix available

    nw-demo

    Malicious code in nw-demo (npm)

    20 May 2026
    No fix available

    nolimit-x

    Malicious code in nolimit-x (npm)

    20 May 2026
    No fix available

    prjct-cli

    Malicious code in prjct-cli (npm)

    20 May 2026
    No fix available

    pinno-loggers

    Malicious code in pinno-loggers (npm)

    20 May 2026
    No fix available

    @semacode/cli

    Malicious code in @semacode/cli (npm)

    20 May 2026
    No fix available

    pretty-logger-utils

    Malicious code in pretty-logger-utils (npm)

    20 May 2026
    No fix available

    bricks-builder-mcp

    Malicious code in bricks-builder-mcp (npm)

    20 May 2026
    No fix available

    local-mcp

    Malicious code in local-mcp (npm)

    20 May 2026
    No fix available

    art-template

    Malicious code in art-template (npm)

    20 May 2026
    No fix available

    use-context-selector-tony

    Malicious code in use-context-selector-tony (npm)

    20 May 2026
    No fix available

    pino-formatter

    Malicious code in pino-formatter (npm)

    20 May 2026
    No fix available

    idlidosa

    Malicious code in idlidosa (npm)

    20 May 2026
    No fix available

    tdpilot

    Malicious code in tdpilot (npm)

    20 May 2026
    No fix available

    @weirdorg/config

    Malicious code in @weirdorg/config (npm)

    20 May 2026
    No fix available

    arc-diag-util

    Malicious code in arc-diag-util (npm)

    20 May 2026
    No fix available

    @zesyn/zeditor

    Malicious code in @zesyn/zeditor (npm)

    20 May 2026
    No fix available

    @weirdorg/dotenv

    Malicious code in @weirdorg/dotenv (npm)

    20 May 2026
    No fix available

    seekcode

    Malicious code in seekcode (npm)

    20 May 2026
    No fix available

    @qwedqwed/axios

    Malicious code in @qwedqwed/axios (npm)

    20 May 2026
    No fix available

    ts-logger-pack

    Malicious code in ts-logger-pack (npm)

    20 May 2026
    No fix available

    terminal-logger-utils

    Malicious code in terminal-logger-utils (npm)

    20 May 2026
    No fix available

    @sec-loans-ui/utils

    Malicious code in @sec-loans-ui/utils (npm)

    20 May 2026
    No fix available

    @riskine-frontend/design-elements

    Malicious code in @riskine-frontend/design-elements (npm)

    20 May 2026
    No fix available

    openclaw-agent

    Malicious code in openclaw-agent (PyPI)

    20 May 2026
    No fix available

    react-tracked-tony

    Malicious code in react-tracked-tony (npm)

    20 May 2026
    No fix available

    qazaq-cli

    Malicious code in qazaq-cli (npm)

    20 May 2026
    No fix available

    promptbook-cli

    Malicious code in promptbook-cli (npm)

    20 May 2026
    No fix available

    promptbook-mcp

    Malicious code in promptbook-mcp (npm)

    20 May 2026
    No fix available

    fca-official-uzair-rajput

    Malicious code in fca-official-uzair-rajput (npm)

    20 May 2026
    No fix available

    security-env-loader

    Malicious code in security-env-loader (npm)

    20 May 2026
    No fix available

    @touchvue/chat

    Malicious code in @touchvue/chat (npm)

    20 May 2026
    No fix available

    fulcrum-sessions

    Malicious code in fulcrum-sessions (npm)

    20 May 2026
    No fix available

    axiosqqq

    Malicious code in axiosqqq (npm)

    20 May 2026
    No fix available

    bucket-protocol-sdk-v2

    Malicious code in bucket-protocol-sdk-v2 (npm)

    20 May 2026
    No fix available

    @pluxee-connect/api-client

    Malicious code in @pluxee-connect/api-client (npm)

    20 May 2026
    No fix available

    mcp-server-iehub-proxy

    Malicious code in mcp-server-iehub-proxy (npm)

    20 May 2026
    No fix available

    @tailwind-core/oxide-win32-x64-msvc

    Malicious code in @tailwind-core/oxide-win32-x64-msvc (npm)

    20 May 2026
    No fix available

    figma-d2c-utils

    Malicious code in figma-d2c-utils (npm)

    20 May 2026
    No fix available