Malicious Packages

Malicious code in use-unsaved-changes (npm)

Malicious code in valid-south-african-id (npm)

Malicious code in web-scraper-mcp (npm)

Malicious code in wellness-expert-ng-gallery (npm)

Malicious code in jsonschemex (PyPI)

Malicious code in @ensdomains/ensjs (npm)

Malicious code in @ensdomains/ensjs-react (npm)

Malicious code in @ensdomains/ccip-read-cf-worker (npm)

Malicious code in @ensdomains/op-resolver-contracts (npm)

Malicious code in @ensdomains/ens-test-env (npm)

Malicious code in @ensdomains/durin (npm)

Malicious code in @ensdomains/ens-contracts (npm)

Malicious code in zapier-platform-legacy-scripting-runner (npm)

Malicious code in posthog-react-native (npm)

Malicious code in posthog-node (npm)

Malicious code in posthog-docusaurus (npm)

Malicious code in mcp-use (npm)

Malicious code in create-mcp-use-app (npm)

Malicious code in capacitor-voice-recorder-wav (npm)

Malicious code in @zapier/stubtree (npm)

Malicious code in @zapier/spectral-api-ruleset (npm)

Malicious code in @zapier/mcp-integration (npm)

Malicious code in @zapier/ai-actions-react (npm)

Malicious code in @postman/wdio-junit-reporter (npm)

Malicious code in @postman/wdio-allure-reporter (npm)

Malicious code in @postman/pretty-ms (npm)

Malicious code in @postman/postman-mcp-server (npm)

Malicious code in @postman/postman-mcp-cli (npm)

Malicious code in @postman/postman-collection-fork (npm)

Malicious code in @postman/pm-bin-windows-x64 (npm)

Malicious code in @postman/pm-bin-macos-x64 (npm)

Malicious code in @postman/pm-bin-macos-arm64 (npm)

Malicious code in @postman/pm-bin-linux-x64 (npm)

Malicious code in @postman/mcp-ui-client (npm)

Malicious code in @posthog/wizard (npm)

Malicious code in @posthog/web-dev-server (npm)

Malicious code in @posthog/variance-plugin (npm)

Malicious code in @posthog/url-normalizer-plugin (npm)

Malicious code in @posthog/twitter-followers-plugin (npm)

Malicious code in @posthog/twilio-plugin (npm)

Malicious code in @posthog/taxonomy-plugin (npm)

Malicious code in @posthog/snowflake-export-plugin (npm)

Malicious code in @posthog/sendgrid-plugin (npm)

Malicious code in @posthog/rrweb-player (npm)

Malicious code in @posthog/react-rrweb-player (npm)

Malicious code in @posthog/plugin-unduplicates (npm)

Malicious code in @posthog/pagerduty-plugin (npm)

Malicious code in @posthog/nextjs-config (npm)

Malicious code in @posthog/nextjs (npm)

Malicious code in @posthog/maxmind-plugin (npm)