Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    ethers-multicall-utils

    Malicious code in ethers-multicall-utils (npm)

    20 May 2026
    No fix available

    @tailwind-core/vite

    Malicious code in @tailwind-core/vite (npm)

    19 May 2026
    No fix available

    lokal-mcp

    Malicious code in lokal-mcp (npm)

    19 May 2026
    No fix available

    tubebrain

    Malicious code in tubebrain (npm)

    19 May 2026
    No fix available

    to-cms

    Malicious code in to-cms (npm)

    19 May 2026
    No fix available

    @flowselections/core

    Malicious code in @flowselections/core (npm)

    19 May 2026
    No fix available

    @riteshkumar04/stack-audit

    Malicious code in @riteshkumar04/stack-audit (npm)

    19 May 2026
    No fix available

    martinez-polygon-clipping-tony

    Malicious code in martinez-polygon-clipping-tony (npm)

    19 May 2026
    No fix available

    morin

    Malicious code in morin (PyPI)

    19 May 2026
    No fix available

    aurapro-ui

    Malicious code in aurapro-ui (PyPI)

    19 May 2026
    No fix available

    did-0091

    Malicious code in did-0091 (npm)

    19 May 2026
    No fix available

    aurafarmer

    Malicious code in aurafarmer (PyPI)

    19 May 2026
    No fix available

    silly-logger

    Malicious code in silly-logger (PyPI)

    19 May 2026
    No fix available

    openirf

    Malicious code in openirf (PyPI)

    19 May 2026
    No fix available

    eplang

    Malicious code in eplang (PyPI)

    19 May 2026
    No fix available

    pycalendar-api

    Malicious code in pycalendar-api (PyPI)

    19 May 2026
    No fix available

    glass-of-water

    Malicious code in glass-of-water (PyPI)

    19 May 2026
    No fix available

    nebulix-ai

    Malicious code in nebulix-ai (PyPI)

    19 May 2026
    No fix available

    saas-common-lib-473815

    Malicious code in saas-common-lib-473815 (PyPI)

    19 May 2026
    No fix available

    clearml-truen-patch

    Malicious code in clearml-truen-patch (PyPI)

    19 May 2026
    No fix available

    zod-to-js

    Malicious code in zod-to-js (npm)

    19 May 2026
    No fix available

    soundsource

    Malicious code in soundsource (PyPI)

    19 May 2026
    No fix available

    buddyme

    Malicious code in buddyme (PyPI)

    19 May 2026
    No fix available

    qontract-reconcile

    Malicious code in qontract-reconcile (PyPI)

    19 May 2026
    No fix available

    crw

    Malicious code in crw (PyPI)

    19 May 2026
    No fix available

    venturo-playwright-runner

    Malicious code in venturo-playwright-runner (npm)

    19 May 2026
    No fix available

    collected-forms-embed-js

    Malicious code in collected-forms-embed-js (npm)

    19 May 2026
    No fix available

    venturo-playwright

    Malicious code in venturo-playwright (npm)

    19 May 2026
    No fix available

    @arbocollab/arbo-web-people

    Malicious code in @arbocollab/arbo-web-people (npm)

    19 May 2026
    No fix available

    @dknzo/soonex-ai

    Malicious code in @dknzo/soonex-ai (npm)

    19 May 2026
    No fix available

    @tarojs/cli

    Malicious code in @tarojs/cli (npm)

    19 May 2026
    No fix available

    clsx-js

    Malicious code in clsx-js (npm)

    19 May 2026
    No fix available

    workrally

    Malicious code in workrally (npm)

    19 May 2026
    No fix available

    dabrius-utils

    Malicious code in dabrius-utils (PyPI)

    19 May 2026
    No fix available

    btd-smart

    Malicious code in btd-smart (npm)

    19 May 2026
    No fix available

    crypto-hash-sdk

    Malicious code in crypto-hash-sdk (npm)

    19 May 2026
    No fix available

    xorma-js

    Malicious code in xorma-js (npm)

    19 May 2026
    No fix available

    qr-code-styling-temp

    Malicious code in qr-code-styling-temp (npm)

    19 May 2026
    No fix available

    alya-baileys

    Malicious code in alya-baileys (npm)

    19 May 2026
    No fix available

    whiteboard-agent

    Malicious code in whiteboard-agent (npm)

    19 May 2026
    No fix available

    claude-all-config

    Malicious code in claude-all-config (npm)

    19 May 2026
    No fix available

    @shadanai/openclaw

    Malicious code in @shadanai/openclaw (npm)

    19 May 2026
    No fix available

    @bonsai-ai/claude-code

    Malicious code in @bonsai-ai/claude-code (npm)

    19 May 2026
    No fix available

    corelia

    Malicious code in corelia (npm)

    19 May 2026
    No fix available

    @bonsai-ai/claude-code-win32-x64

    Malicious code in @bonsai-ai/claude-code-win32-x64 (npm)

    19 May 2026
    No fix available

    open-agents-ai

    Malicious code in open-agents-ai (npm)

    19 May 2026
    No fix available

    superacli

    Malicious code in superacli (npm)

    19 May 2026
    No fix available

    @citely/mcp-server

    Malicious code in @citely/mcp-server (npm)

    19 May 2026
    No fix available

    prettier-sdk

    Malicious code in prettier-sdk (npm)

    19 May 2026
    No fix available

    cheaty-sync-bot

    Malicious code in cheaty-sync-bot (npm)

    19 May 2026
    No fix available