Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    paychex-common-vendor-lib

    Malicious code in paychex-common-vendor-lib (npm)

    4 May 2026
    No fix available

    cloudauth-sdk

    Malicious code in cloudauth-sdk (PyPI)

    4 May 2026
    No fix available

    randomchoicemas

    Malicious code in randomchoicemas (PyPI)

    4 May 2026
    No fix available

    @t-in-one/save_application_hid_to_storage

    Malicious code in @t-in-one/save_application_hid_to_storage (npm)

    4 May 2026
    No fix available

    @bank-widgets/whats-new

    Malicious code in @bank-widgets/whats-new (npm)

    4 May 2026
    No fix available

    @apple-pay-trust/check-apple-pay

    Malicious code in @apple-pay-trust/check-apple-pay (npm)

    4 May 2026
    No fix available

    @apple-pay-trust/destroy

    Malicious code in @apple-pay-trust/destroy (npm)

    4 May 2026
    No fix available

    @b2b_blocker/hide_activation_error

    Malicious code in @b2b_blocker/hide_activation_error (npm)

    4 May 2026
    No fix available

    @google-pay-trust/init-google-pay-result

    Malicious code in @google-pay-trust/init-google-pay-result (npm)

    4 May 2026
    No fix available

    @google-pay-trust/start

    Malicious code in @google-pay-trust/start (npm)

    4 May 2026
    No fix available

    @montanatonytest/app.web

    Malicious code in @montanatonytest/app.web (npm)

    4 May 2026
    No fix available

    accesso-angular-cache-buster

    Malicious code in accesso-angular-cache-buster (npm)

    4 May 2026
    No fix available

    @kills_sh/bootstrap

    Malicious code in @kills_sh/bootstrap (npm)

    4 May 2026
    No fix available

    edj-shopify-theme

    Malicious code in edj-shopify-theme (npm)

    4 May 2026
    No fix available

    honcho-theme

    Malicious code in honcho-theme (npm)

    4 May 2026
    No fix available

    muenxo

    Malicious code in muenxo (npm)

    4 May 2026
    No fix available

    pi-exa-mcp

    Malicious code in pi-exa-mcp (npm)

    4 May 2026
    No fix available

    pos-next-react-native

    Malicious code in pos-next-react-native (npm)

    4 May 2026
    No fix available

    shopify-draggable

    Malicious code in shopify-draggable (npm)

    4 May 2026
    No fix available

    temhe-dev

    Malicious code in temhe-dev (npm)

    4 May 2026
    No fix available

    tinfoil-shops

    Malicious code in tinfoil-shops (npm)

    4 May 2026
    No fix available

    vpi-guides

    Malicious code in vpi-guides (npm)

    4 May 2026
    No fix available

    wagner-horizon

    Malicious code in wagner-horizon (npm)

    4 May 2026
    No fix available

    @w3m-app/get_chain_id

    Malicious code in @w3m-app/get_chain_id (npm)

    4 May 2026
    No fix available

    @w3m-app/is_connected

    Malicious code in @w3m-app/is_connected (npm)

    4 May 2026
    No fix available

    @w3m-app/switch_network

    Malicious code in @w3m-app/switch_network (npm)

    4 May 2026
    No fix available

    @bcs-react-ui/select

    Malicious code in @bcs-react-ui/select (npm)

    4 May 2026
    No fix available

    @bcs-ui/theme

    Malicious code in @bcs-ui/theme (npm)

    4 May 2026
    No fix available

    @bcs-bank/common-constants

    Malicious code in @bcs-bank/common-constants (npm)

    4 May 2026
    No fix available

    @bcs-bank/init

    Malicious code in @bcs-bank/init (npm)

    4 May 2026
    No fix available

    @bcs-bank-react-ui/swiper-slider

    Malicious code in @bcs-bank-react-ui/swiper-slider (npm)

    4 May 2026
    No fix available

    @bcs-mi/store

    Malicious code in @bcs-mi/store (npm)

    4 May 2026
    No fix available

    @bcs-react-ui/context-menu

    Malicious code in @bcs-react-ui/context-menu (npm)

    4 May 2026
    No fix available

    @bcs-adapters/core-adapter

    Malicious code in @bcs-adapters/core-adapter (npm)

    4 May 2026
    No fix available

    @bcs-adapters/keycloak-api-adapter

    Malicious code in @bcs-adapters/keycloak-api-adapter (npm)

    4 May 2026
    No fix available

    paypal-payouts-bridge

    Malicious code in paypal-payouts-bridge (npm)

    4 May 2026
    No fix available

    microsoft-agents-auth-service

    Malicious code in microsoft-agents-auth-service (npm)

    4 May 2026
    No fix available

    feature-flag-service

    Malicious code in feature-flag-service (npm)

    3 May 2026
    No fix available

    gauth-client

    Malicious code in gauth-client (PyPI)

    3 May 2026
    No fix available

    puan31

    Malicious code in puan31 (PyPI)

    3 May 2026
    No fix available

    rostilesolver

    Malicious code in rostilesolver (PyPI)

    3 May 2026
    No fix available

    google-cloud-secret-manager-config-poc

    Malicious code in google-cloud-secret-manager-config-poc (npm)

    3 May 2026
    No fix available

    internal-company-module-test-1337

    Malicious code in internal-company-module-test-1337 (npm)

    3 May 2026
    No fix available

    pwn-control

    Malicious code in pwn-control (PyPI)

    3 May 2026
    No fix available

    metoopro

    Malicious code in metoopro (PyPI)

    3 May 2026
    No fix available

    ally-call-wait-time

    Malicious code in ally-call-wait-time (npm)

    3 May 2026
    No fix available

    @allybank/ally-sdk

    Malicious code in @allybank/ally-sdk (npm)

    3 May 2026
    No fix available

    ally-allowlist

    Malicious code in ally-allowlist (npm)

    3 May 2026
    No fix available

    @athena-portal/themes

    Malicious code in @athena-portal/themes (npm)

    3 May 2026
    No fix available

    ally-eagw-identity

    Malicious code in ally-eagw-identity (npm)

    3 May 2026
    No fix available