Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    bytecore

    Malicious code in bytecore (npm)

    19 May 2026
    No fix available

    durabletask

    Malicious code in durabletask (PyPI)

    19 May 2026
    No fix available

    @mc-xp/mc-monolith-js-src-package

    Malicious code in @mc-xp/mc-monolith-js-src-package (npm)

    19 May 2026
    No fix available

    @piewasm/pie-web-npm-package

    Malicious code in @piewasm/pie-web-npm-package (npm)

    19 May 2026
    No fix available

    is-really-odd

    Malicious code in is-really-odd (npm)

    19 May 2026
    No fix available

    psxjson

    Malicious code in psxjson (npm)

    19 May 2026
    No fix available

    paysafe-gbp-virtual-assistant-lib-fe

    Malicious code in paysafe-gbp-virtual-assistant-lib-fe (npm)

    19 May 2026
    No fix available

    chai-as-attracted

    Malicious code in chai-as-attracted (npm)

    19 May 2026
    No fix available

    chai-as-vec

    Malicious code in chai-as-vec (npm)

    19 May 2026
    No fix available

    paysafe-gbp-virtual-terminal-lib-fe

    Malicious code in paysafe-gbp-virtual-terminal-lib-fe (npm)

    19 May 2026
    No fix available

    tarpackage

    Malicious code in tarpackage (PyPI)

    19 May 2026
    No fix available

    identitysecuretokenserv

    Malicious code in identitysecuretokenserv (npm)

    19 May 2026
    No fix available

    vfat-ai

    Malicious code in vfat-ai (PyPI)

    19 May 2026
    No fix available

    vfat

    Malicious code in vfat (PyPI)

    19 May 2026
    No fix available

    @apps-home-dashboard/events

    Malicious code in @apps-home-dashboard/events (npm)

    19 May 2026
    No fix available

    @cap-js/openapi

    Malicious code in @cap-js/openapi (npm)

    19 May 2026
    No fix available

    @openclaw-cn/cli

    Malicious code in @openclaw-cn/cli (npm)

    19 May 2026
    No fix available

    @openclaw-cn/feishu

    Malicious code in @openclaw-cn/feishu (npm)

    19 May 2026
    No fix available

    @openclaw-cn/libsignal

    Malicious code in @openclaw-cn/libsignal (npm)

    19 May 2026
    No fix available

    @openclaw-cn/toutiao-ops

    Malicious code in @openclaw-cn/toutiao-ops (npm)

    19 May 2026
    No fix available

    @starmind/collector-cli

    Malicious code in @starmind/collector-cli (npm)

    19 May 2026
    No fix available

    openclaw-cn

    Malicious code in openclaw-cn (npm)

    19 May 2026
    No fix available

    vfat-tools

    Malicious code in vfat-tools (npm)

    19 May 2026
    No fix available

    sickle-wrapper

    Malicious code in sickle-wrapper (npm)

    19 May 2026
    No fix available

    @antv/xflow-hook

    Malicious code in @antv/xflow-hook (npm)

    19 May 2026
    No fix available

    @lint-md/cli

    Malicious code in @lint-md/cli (npm)

    19 May 2026
    No fix available

    @lint-md/core

    Malicious code in @lint-md/core (npm)

    19 May 2026
    No fix available

    @lint-md/parser

    Malicious code in @lint-md/parser (npm)

    19 May 2026
    No fix available

    ai-figure

    Malicious code in ai-figure (npm)

    19 May 2026
    No fix available

    jest-random-mock

    Malicious code in jest-random-mock (npm)

    19 May 2026
    No fix available

    jest-url-loader

    Malicious code in jest-url-loader (npm)

    19 May 2026
    No fix available

    limit-size

    Malicious code in limit-size (npm)

    19 May 2026
    No fix available

    lint-md

    Malicious code in lint-md (npm)

    19 May 2026
    No fix available

    mcp-echarts

    Malicious code in mcp-echarts (npm)

    19 May 2026
    No fix available

    mcp-mermaid

    Malicious code in mcp-mermaid (npm)

    19 May 2026
    No fix available

    miz

    Malicious code in miz (npm)

    19 May 2026
    No fix available

    onfire.js

    Malicious code in onfire.js (npm)

    19 May 2026
    No fix available

    react-adsense

    Malicious code in react-adsense (npm)

    19 May 2026
    No fix available

    relationship.js

    Malicious code in relationship.js (npm)

    19 May 2026
    No fix available

    timeago-react

    Malicious code in timeago-react (npm)

    19 May 2026
    No fix available

    timeago.js

    Malicious code in timeago.js (npm)

    19 May 2026
    No fix available

    uri-parse

    Malicious code in uri-parse (npm)

    19 May 2026
    No fix available

    word-width

    Malicious code in word-width (npm)

    19 May 2026
    No fix available

    @antv/g-plugin-zdog-svg-renderer

    Malicious code in @antv/g-plugin-zdog-svg-renderer (npm)

    19 May 2026
    No fix available

    @antv/g-shader-components

    Malicious code in @antv/g-shader-components (npm)

    19 May 2026
    No fix available

    @antv/g-svg

    Malicious code in @antv/g-svg (npm)

    19 May 2026
    No fix available

    @antv/g-web-animations-api

    Malicious code in @antv/g-web-animations-api (npm)

    19 May 2026
    No fix available

    @antv/g-web-components

    Malicious code in @antv/g-web-components (npm)

    19 May 2026
    No fix available

    @antv/g-webgl

    Malicious code in @antv/g-webgl (npm)

    19 May 2026
    No fix available

    @antv/g-webgl-compute

    Malicious code in @antv/g-webgl-compute (npm)

    19 May 2026
    No fix available