Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    electra-web-player-event

    Malicious code in electra-web-player-event (npm)

    6 Jan 2026
    No fix available

    importmap-polyfil

    Malicious code in importmap-polyfil (npm)

    6 Jan 2026
    No fix available

    matic-transfer-consumer

    Malicious code in matic-transfer-consumer (npm)

    6 Jan 2026
    No fix available

    okta-auth-js

    Malicious code in okta-auth-js (npm)

    6 Jan 2026
    No fix available

    okta-loginpage-render

    Malicious code in okta-loginpage-render (npm)

    6 Jan 2026
    No fix available

    shopify-perf-kit

    Malicious code in shopify-perf-kit (npm)

    6 Jan 2026
    No fix available

    polymarket-clob

    Malicious code in polymarket-clob (npm)

    6 Jan 2026
    No fix available

    ethos2.0

    Malicious code in ethos2.0 (npm)

    6 Jan 2026
    No fix available

    bignumber.js-new

    Malicious code in bignumber.js-new (npm)

    6 Jan 2026
    No fix available

    cp_amm

    Malicious code in cp_amm (npm)

    6 Jan 2026
    No fix available

    open-telemetry-mini-client

    Malicious code in open-telemetry-mini-client (npm)

    6 Jan 2026
    No fix available

    react-native-kyc

    Malicious code in react-native-kyc (npm)

    6 Jan 2026
    No fix available

    seanp-test-package-do-not-use2

    Malicious code in seanp-test-package-do-not-use2 (npm)

    6 Jan 2026
    No fix available

    smartspacestoreapp

    Malicious code in smartspacestoreapp (npm)

    6 Jan 2026
    No fix available

    upgrade-mobile

    Malicious code in upgrade-mobile (npm)

    6 Jan 2026
    No fix available

    wikibuy-mobile

    Malicious code in wikibuy-mobile (npm)

    6 Jan 2026
    No fix available

    wikibuy-mobile-analytics

    Malicious code in wikibuy-mobile-analytics (npm)

    6 Jan 2026
    No fix available

    chai-as-required

    Malicious code in chai-as-required (npm)

    6 Jan 2026
    No fix available

    redis-request-parser

    Malicious code in redis-request-parser (npm)

    6 Jan 2026
    No fix available

    @shop-cicd/webpack-package-artifact

    Malicious code in @shop-cicd/webpack-package-artifact (npm)

    6 Jan 2026
    No fix available

    n8n-nodes-performance-metrics

    Malicious code in n8n-nodes-performance-metrics (npm)

    6 Jan 2026
    No fix available

    n8n-performance-metrics

    Malicious code in n8n-performance-metrics (npm)

    6 Jan 2026
    No fix available

    eslint-supertest

    Malicious code in eslint-supertest (npm)

    6 Jan 2026
    No fix available

    redis-cookie-js

    Malicious code in redis-cookie-js (npm)

    6 Jan 2026
    No fix available

    redis-cookie-parser

    Malicious code in redis-cookie-parser (npm)

    6 Jan 2026
    No fix available

    oj-sp-common-util

    Malicious code in oj-sp-common-util (npm)

    6 Jan 2026
    No fix available

    oj-sp-css-additions

    Malicious code in oj-sp-css-additions (npm)

    6 Jan 2026
    No fix available

    oj-sp-messages-banner

    Malicious code in oj-sp-messages-banner (npm)

    6 Jan 2026
    No fix available

    oj-sp-about-page

    Malicious code in oj-sp-about-page (npm)

    6 Jan 2026
    No fix available

    oj-sp-common

    Malicious code in oj-sp-common (npm)

    6 Jan 2026
    No fix available

    oj-sp-common-strings

    Malicious code in oj-sp-common-strings (npm)

    6 Jan 2026
    No fix available

    hello-world-npm-demo-example

    Malicious code in hello-world-npm-demo-example (npm)

    6 Jan 2026
    No fix available

    auto-backup-linux

    Malicious code in auto-backup-linux (PyPI)

    5 Jan 2026
    No fix available

    auto-backup-macos

    Malicious code in auto-backup-macos (PyPI)

    5 Jan 2026
    No fix available

    auto-backup-wsl

    Malicious code in auto-backup-wsl (PyPI)

    5 Jan 2026
    No fix available

    auto-backup-wins

    Malicious code in auto-backup-wins (PyPI)

    5 Jan 2026
    No fix available

    react-transition-group-legacy

    Malicious code in react-transition-group-legacy (npm)

    5 Jan 2026
    No fix available

    @crepo/crepo-url-query-mapper

    Malicious code in @crepo/crepo-url-query-mapper (npm)

    5 Jan 2026
    No fix available

    lium-io-gztensor

    Malicious code in lium-io-gztensor (PyPI)

    5 Jan 2026
    No fix available

    lium-4-96

    Malicious code in lium-4-96 (PyPI)

    5 Jan 2026
    No fix available

    async-substrate-interface-upgrade

    Malicious code in async-substrate-interface-upgrade (PyPI)

    5 Jan 2026
    No fix available

    celium-collateral-upgrade

    Malicious code in celium-collateral-upgrade (PyPI)

    5 Jan 2026
    No fix available

    gztensor-cli

    Malicious code in gztensor-cli (PyPI)

    5 Jan 2026
    No fix available

    faceplate-ui

    Malicious code in faceplate-ui (npm)

    5 Jan 2026
    No fix available

    diskho

    Malicious code in diskho (npm)

    5 Jan 2026
    No fix available

    shop-state

    Malicious code in shop-state (npm)

    5 Jan 2026
    No fix available

    @airtel-web/legos

    Malicious code in @airtel-web/legos (npm)

    5 Jan 2026
    No fix available

    @signify/vue-components

    Malicious code in @signify/vue-components (npm)

    5 Jan 2026
    No fix available

    published_at

    Malicious code in published_at (npm)

    5 Jan 2026
    No fix available

    pyrogrom

    Malicious code in pyrogrom (PyPI)

    5 Jan 2026
    No fix available