Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    crypto-keccak-js

    Malicious code in crypto-keccak-js (npm)

    22 Apr 2026
    No fix available

    gleb-js

    Malicious code in gleb-js (npm)

    22 Apr 2026
    No fix available

    ts-utils-dev

    Malicious code in ts-utils-dev (npm)

    22 Apr 2026
    No fix available

    claudcode-cli

    Malicious code in claudcode-cli (npm)

    22 Apr 2026
    No fix available

    claudcode-mcp

    Malicious code in claudcode-mcp (npm)

    22 Apr 2026
    No fix available

    @bitunix/test

    Malicious code in @bitunix/test (npm)

    22 Apr 2026
    No fix available

    @usealloy/api-contract

    Malicious code in @usealloy/api-contract (npm)

    22 Apr 2026
    No fix available

    @usealloy/component-library

    Malicious code in @usealloy/component-library (npm)

    22 Apr 2026
    No fix available

    @usealloy/typegen

    Malicious code in @usealloy/typegen (npm)

    22 Apr 2026
    No fix available

    aven_types

    Malicious code in aven_types (npm)

    22 Apr 2026
    No fix available

    6161test1234

    Malicious code in 6161test1234 (npm)

    21 Apr 2026
    No fix available

    com.tencent.puerts.agent

    Malicious code in com.tencent.puerts.agent (npm)

    21 Apr 2026
    No fix available

    build-metadata-logger

    Malicious code in build-metadata-logger (PyPI)

    21 Apr 2026
    No fix available

    buildenv-collector

    Malicious code in buildenv-collector (PyPI)

    21 Apr 2026
    No fix available

    typelimagic

    Malicious code in typelimagic (PyPI)

    21 Apr 2026
    No fix available

    my-package-jiecub3

    Malicious code in my-package-jiecub3 (PyPI)

    21 Apr 2026
    No fix available

    apple-auth-internal

    Malicious code in apple-auth-internal (npm)

    21 Apr 2026
    No fix available

    apple-internal-security-poc-frank

    Malicious code in apple-internal-security-poc-frank (npm)

    21 Apr 2026
    No fix available

    cycode-dev

    Malicious code in cycode-dev (PyPI)

    20 Apr 2026
    No fix available

    mysten-metrics

    Malicious code in mysten_metrics (crates.io)

    20 Apr 2026
    No fix available

    @serasa/core

    Malicious code in @serasa/core (npm)

    20 Apr 2026
    No fix available

    @settle-sea/supporting-documents

    Malicious code in @settle-sea/supporting-documents (npm)

    20 Apr 2026
    No fix available

    bmg-web-features

    Malicious code in bmg-web-features (npm)

    20 Apr 2026
    No fix available

    bmg-web

    Malicious code in bmg-web (npm)

    20 Apr 2026
    No fix available

    megabank-worklist

    Malicious code in megabank-worklist (npm)

    20 Apr 2026
    No fix available

    internal_insights_enabled

    Malicious code in internal_insights_enabled (npm)

    20 Apr 2026
    No fix available

    hifromhere1

    Malicious code in hifromhere1 (npm)

    20 Apr 2026
    No fix available

    tailwind-text-fill

    Malicious code in tailwind-text-fill (npm)

    20 Apr 2026
    No fix available

    pathjoin

    Malicious code in pathjoin (PyPI)

    20 Apr 2026
    No fix available

    leavemealone

    Malicious code in leavemealone (PyPI)

    20 Apr 2026
    No fix available

    moonbit-metrics-validator

    Malicious code in moonbit-metrics-validator (PyPI)

    20 Apr 2026
    No fix available

    moonbit-schema-utils

    Malicious code in moonbit-schema-utils (PyPI)

    20 Apr 2026
    No fix available

    moonbit-locale-compat

    Malicious code in moonbit-locale-compat (PyPI)

    20 Apr 2026
    No fix available

    bignum-ts-v2

    Malicious code in bignum-ts-v2 (npm)

    20 Apr 2026
    No fix available

    npm-doc-deploy

    Malicious code in npm-doc-deploy (npm)

    20 Apr 2026
    No fix available

    @tushar-br/file11

    Malicious code in @tushar-br/file11 (npm)

    20 Apr 2026
    No fix available

    @tushar-br/editing-pack

    Malicious code in @tushar-br/editing-pack (npm)

    20 Apr 2026
    No fix available

    @tushar-br/desktop

    Malicious code in @tushar-br/desktop (npm)

    20 Apr 2026
    No fix available

    krdfonts

    Malicious code in krdfonts (npm)

    20 Apr 2026
    No fix available

    @otaxayuns/baileys

    Malicious code in @otaxayuns/baileys (npm)

    20 Apr 2026
    No fix available

    turbo-leven

    Malicious code in turbo-leven (npm)

    20 Apr 2026
    No fix available

    turbo-he

    Malicious code in turbo-he (npm)

    20 Apr 2026
    No fix available

    optimized-fastest-levenshtein

    Malicious code in optimized-fastest-levenshtein (npm)

    20 Apr 2026
    No fix available

    mailcraftjs

    Malicious code in mailcraftjs (npm)

    20 Apr 2026
    No fix available

    @kjma/mailcraft

    Malicious code in @kjma/mailcraft (npm)

    20 Apr 2026
    No fix available

    chandan-module-test

    Malicious code in chandan-module-test (npm)

    19 Apr 2026
    No fix available

    pa-marked-internal

    Malicious code in pa-marked-internal (npm)

    19 Apr 2026
    No fix available

    rblx-studio-api

    Malicious code in rblx-studio-api (PyPI)

    19 Apr 2026
    No fix available

    react-spa-shadcn

    Malicious code in react-spa-shadcn (npm)

    19 Apr 2026
    No fix available

    robase-setup

    Malicious code in robase-setup (PyPI)

    19 Apr 2026
    No fix available