Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    stark-recurser

    Malicious code in stark-recurser (npm)

    2 Nov 2025
    No fix available

    krisp-audio

    Malicious code in krisp-audio (PyPI)

    2 Nov 2025
    No fix available

    hexdecimal

    Malicious code in hexdecimal (PyPI)

    2 Nov 2025
    No fix available

    u8ymp15aglfp7y

    Malicious code in u8ymp15aglfp7y (npm)

    1 Nov 2025
    No fix available

    sechub-openapi-ts-client

    Malicious code in sechub-openapi-ts-client (npm)

    31 Oct 2025
    No fix available

    sechub-openapi-typescript

    Malicious code in sechub-openapi-typescript (npm)

    31 Oct 2025
    No fix available

    kubeflow

    Malicious code in kubeflow (npm)

    31 Oct 2025
    No fix available

    radial-chart

    Malicious code in radial-chart (npm)

    31 Oct 2025
    No fix available

    pygments-richstyle

    Malicious code in pygments-richstyle (PyPI)

    31 Oct 2025
    No fix available

    richx

    Malicious code in richx (PyPI)

    31 Oct 2025
    No fix available

    baseline-server

    Malicious code in baseline-server (npm)

    31 Oct 2025
    No fix available

    vity-toolkit

    Malicious code in vity-toolkit (npm)

    31 Oct 2025
    No fix available

    new-route-matrix

    Malicious code in new-route-matrix (npm)

    31 Oct 2025
    No fix available

    gunpowder-ghost-curse

    Malicious code in gunpowder-ghost-curse (npm)

    31 Oct 2025
    No fix available

    express-document-sdk

    Malicious code in express-document-sdk (npm)

    31 Oct 2025
    No fix available

    spectral-utils

    Malicious code in spectral-utils (npm)

    31 Oct 2025
    No fix available

    ecto-utils

    Malicious code in ecto-utils (npm)

    31 Oct 2025
    No fix available

    dx_auth2_app

    Malicious code in dx_auth2_app (npm)

    31 Oct 2025
    No fix available

    da-lit

    Malicious code in da-lit (npm)

    31 Oct 2025
    No fix available

    @dvargas135/gunpowder-ghost

    Malicious code in @dvargas135/gunpowder-ghost (npm)

    31 Oct 2025
    No fix available

    frontend-buenaspracticas

    Malicious code in frontend-buenaspracticas (npm)

    31 Oct 2025
    No fix available

    @alexandrsarioglo/npm-ghost-htb

    Malicious code in @alexandrsarioglo/npm-ghost-htb (npm)

    31 Oct 2025
    No fix available

    @asarioglo/ect-472839

    Malicious code in @asarioglo/ect-472839 (npm)

    31 Oct 2025
    No fix available

    year_dropdown

    Malicious code in year_dropdown (npm)

    31 Oct 2025
    No fix available

    gel-gss

    Malicious code in gel-gss (npm)

    31 Oct 2025
    No fix available

    test881

    Malicious code in test881 (npm)

    31 Oct 2025
    No fix available

    random-packaging

    Malicious code in random-packaging (npm)

    31 Oct 2025
    No fix available

    month_year_dropdown

    Malicious code in month_year_dropdown (npm)

    31 Oct 2025
    No fix available

    blackbeard-navigator-ctf

    Malicious code in blackbeard-navigator-ctf (npm)

    31 Oct 2025
    No fix available

    @qwant-internal/datahub-logger

    Malicious code in @qwant-internal/datahub-logger (npm)

    31 Oct 2025
    No fix available

    gel-iconfont

    Malicious code in gel-iconfont (npm)

    31 Oct 2025
    No fix available

    @asarioglo/npm-ghost-htb

    Malicious code in @asarioglo/npm-ghost-htb (npm)

    31 Oct 2025
    No fix available

    test882

    Malicious code in test882 (npm)

    31 Oct 2025
    No fix available

    bcp-security-package-update

    Malicious code in bcp-security-package-update (npm)

    31 Oct 2025
    No fix available

    ect-472839

    Malicious code in ect-472839 (npm)

    31 Oct 2025
    No fix available

    groupstrap

    Malicious code in groupstrap (npm)

    31 Oct 2025
    No fix available

    gunpowder-ghost

    Malicious code in gunpowder-ghost (npm)

    31 Oct 2025
    No fix available

    unplugin-vue-component

    Malicious code in unplugin-vue-component (npm)

    31 Oct 2025
    No fix available

    vue2-script-ext-html-webpack-plugin

    Malicious code in vue2-script-ext-html-webpack-plugin (npm)

    31 Oct 2025
    No fix available

    speed-testing-nt

    Malicious code in speed-testing-nt (PyPI)

    31 Oct 2025
    No fix available

    telegram-bot-starter

    Malicious code in telegram-bot-starter (npm)

    31 Oct 2025
    No fix available

    telegram-bot-start

    Malicious code in telegram-bot-start (npm)

    31 Oct 2025
    No fix available

    web3-wc

    Malicious code in web3-wc (npm)

    31 Oct 2025
    No fix available

    icon-react-fork

    Malicious code in icon-react-fork (npm)

    31 Oct 2025
    No fix available

    cursor-ai-fork

    Malicious code in cursor-ai-fork (npm)

    31 Oct 2025
    No fix available

    react-icon-pkg

    Malicious code in react-icon-pkg (npm)

    31 Oct 2025
    No fix available

    botty-fork-baby

    Malicious code in botty-fork-baby (npm)

    31 Oct 2025
    No fix available

    fork-spoon-fork

    Malicious code in fork-spoon-fork (npm)

    31 Oct 2025
    No fix available

    abeya-tg-api

    Malicious code in abeya-tg-api (npm)

    31 Oct 2025
    No fix available

    custom-telegram-bot-api

    Malicious code in custom-telegram-bot-api (npm)

    31 Oct 2025
    No fix available