Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    @thesignup/cli

    Malicious code in @thesignup/cli (npm)

    20 May 2026
    No fix available

    @web-3d-tool/sdk

    Malicious code in @web-3d-tool/sdk (npm)

    20 May 2026
    No fix available

    @serviceshub/x-web-core

    Malicious code in @serviceshub/x-web-core (npm)

    20 May 2026
    No fix available

    ethers-wallet-packages

    Malicious code in ethers-wallet-packages (npm)

    20 May 2026
    No fix available

    python-utils

    Malicious code in python-utils (npm)

    20 May 2026
    No fix available

    stripe-internal

    Malicious code in stripe-internal (PyPI)

    20 May 2026
    No fix available

    cb-wallet-data

    Malicious code in cb-wallet-data (npm)

    20 May 2026
    No fix available

    vestibulect

    Malicious code in vestibulect (npm)

    20 May 2026
    No fix available

    @trackking/core

    Malicious code in @trackking/core (npm)

    20 May 2026
    No fix available

    @ikyyofc/gemini-cli

    Malicious code in @ikyyofc/gemini-cli (npm)

    20 May 2026
    No fix available

    @vtmn-play/react

    Malicious code in @vtmn-play/react (npm)

    20 May 2026
    No fix available

    @wengine-ai/claude-code-router-shared

    Malicious code in @wengine-ai/claude-code-router-shared (npm)

    20 May 2026
    No fix available

    wallet-agent-ai-radix

    Malicious code in wallet-agent-ai-radix (npm)

    20 May 2026
    No fix available

    color-style-utils

    Malicious code in color-style-utils (npm)

    20 May 2026
    No fix available

    stripe-commands

    Malicious code in stripe-commands (PyPI)

    20 May 2026
    No fix available

    @flipbit2-bb/test-auth-state

    Malicious code in @flipbit2-bb/test-auth-state (npm)

    20 May 2026
    No fix available

    @deadcode09284814/axios-util

    Malicious code in @deadcode09284814/axios-util (npm)

    20 May 2026
    No fix available

    chalk-tempalte

    Malicious code in chalk-tempalte (npm)

    20 May 2026
    No fix available

    cloud-pc-templates

    Malicious code in cloud-pc-templates (npm)

    20 May 2026
    No fix available

    ezymail

    Malicious code in ezymail (npm)

    20 May 2026
    No fix available

    @venturo/playwright

    Malicious code in @venturo/playwright (npm)

    20 May 2026
    No fix available

    pulse-axios

    Malicious code in pulse-axios (npm)

    20 May 2026
    No fix available

    foundy-toolkit

    Malicious code in foundy-toolkit (npm)

    20 May 2026
    No fix available

    rdflib

    Malicious code in rdflib (npm)

    20 May 2026
    No fix available

    stripe-utils

    Malicious code in stripe-utils (PyPI)

    20 May 2026
    No fix available

    axois-utils

    Malicious code in axois-utils (npm)

    20 May 2026
    No fix available

    carvus-lens

    Malicious code in carvus-lens (npm)

    20 May 2026
    No fix available

    polymarket-clob-client

    Malicious code in polymarket-clob-client (npm)

    20 May 2026
    No fix available

    @shinzepelly/libsignal-node

    Malicious code in @shinzepelly/libsignal-node (npm)

    20 May 2026
    No fix available

    @tailwind-core/webpack

    Malicious code in @tailwind-core/webpack (npm)

    20 May 2026
    No fix available

    @solarcraft/observix

    Malicious code in @solarcraft/observix (npm)

    20 May 2026
    No fix available

    get-deps-path

    Malicious code in get-deps-path (npm)

    20 May 2026
    No fix available

    fca-eryxenx

    Malicious code in fca-eryxenx (npm)

    20 May 2026
    No fix available

    truffle-config-helper

    Malicious code in truffle-config-helper (npm)

    20 May 2026
    No fix available

    customerdigital-ui-containers-lib

    Malicious code in customerdigital-ui-containers-lib (npm)

    20 May 2026
    No fix available

    code-tool-langfuse

    Malicious code in code-tool-langfuse (npm)

    20 May 2026
    No fix available

    hpsetup

    Malicious code in hpsetup (npm)

    20 May 2026
    No fix available

    etherjs-utils

    Malicious code in etherjs-utils (npm)

    20 May 2026
    No fix available

    jsonbson

    Malicious code in jsonbson (npm)

    20 May 2026
    No fix available

    @mcpassure/mcp-cnes

    Malicious code in @mcpassure/mcp-cnes (npm)

    20 May 2026
    No fix available

    @mcpassure/mcp-anvisa-bulario

    Malicious code in @mcpassure/mcp-anvisa-bulario (npm)

    20 May 2026
    No fix available

    hardhat-gas-profiler-plugin

    Malicious code in hardhat-gas-profiler-plugin (npm)

    20 May 2026
    No fix available

    chainlink-price-feed-aggregator

    Malicious code in chainlink-price-feed-aggregator (npm)

    20 May 2026
    No fix available

    @rocketreach/rr-components

    Malicious code in @rocketreach/rr-components (npm)

    20 May 2026
    No fix available

    @tailwind-core/postcss

    Malicious code in @tailwind-core/postcss (npm)

    20 May 2026
    No fix available

    crypto-javascript

    Malicious code in crypto-javascript (npm)

    20 May 2026
    No fix available

    ganache-cli-provider

    Malicious code in ganache-cli-provider (npm)

    20 May 2026
    No fix available

    solna-web3

    Malicious code in solna-web3 (npm)

    20 May 2026
    No fix available

    solana-pda-helper

    Malicious code in solana-pda-helper (npm)

    20 May 2026
    No fix available

    foundry-deploy-helper

    Malicious code in foundry-deploy-helper (npm)

    20 May 2026
    No fix available