Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    manual-billing-system-miniapp-api

    Malicious code in manual-billing-system-miniapp-api (npm)

    24 Nov 2025
    No fix available

    korea-administrative-area-geo-json-util

    Malicious code in korea-administrative-area-geo-json-util (npm)

    24 Nov 2025
    No fix available

    @actbase/css-to-react-native-transform

    Malicious code in @actbase/css-to-react-native-transform (npm)

    24 Nov 2025
    No fix available

    @ensdomains/vite-plugin-i18next-loader

    Malicious code in @ensdomains/vite-plugin-i18next-loader (npm)

    24 Nov 2025
    No fix available

    @actbase/node-server

    Malicious code in @actbase/node-server (npm)

    24 Nov 2025
    No fix available

    @ensdomains/hardhat-toolbox-viem-extended

    Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm)

    24 Nov 2025
    No fix available

    @actbase/react-native-fast-image

    Malicious code in @actbase/react-native-fast-image (npm)

    24 Nov 2025
    No fix available

    @asyncapi/python-paho-template

    Malicious code in @asyncapi/python-paho-template (npm)

    24 Nov 2025
    No fix available

    @asyncapi/go-watermill-template

    Malicious code in @asyncapi/go-watermill-template (npm)

    24 Nov 2025
    No fix available

    @actbase/react-native-less-transformer

    Malicious code in @actbase/react-native-less-transformer (npm)

    24 Nov 2025
    No fix available

    @asyncapi/java-template

    Malicious code in @asyncapi/java-template (npm)

    24 Nov 2025
    No fix available

    medusa-plugin-product-reviews-kvy

    Malicious code in medusa-plugin-product-reviews-kvy (npm)

    24 Nov 2025
    No fix available

    @aryanhussain/my-angular-lib

    Malicious code in @aryanhussain/my-angular-lib (npm)

    24 Nov 2025
    No fix available

    devstart-cli

    Malicious code in devstart-cli (npm)

    24 Nov 2025
    No fix available

    dotnet-template

    Malicious code in dotnet-template (npm)

    24 Nov 2025
    No fix available

    capacitor-plugin-scgssigninwithgoogle

    Malicious code in capacitor-plugin-scgssigninwithgoogle (npm)

    24 Nov 2025
    No fix available

    @zapier/eslint-plugin-zapier

    Malicious code in @zapier/eslint-plugin-zapier (npm)

    24 Nov 2025
    No fix available

    capacitor-purchase-history

    Malicious code in capacitor-purchase-history (npm)

    24 Nov 2025
    No fix available

    posthog-plugin-hello-world

    Malicious code in posthog-plugin-hello-world (npm)

    24 Nov 2025
    No fix available

    @asyncapi/java-spring-cloud-stream-template

    Malicious code in @asyncapi/java-spring-cloud-stream-template (npm)

    24 Nov 2025
    No fix available

    esbuild-plugin-httpfile

    Malicious code in esbuild-plugin-httpfile (npm)

    24 Nov 2025
    No fix available

    @ensdomains/blacklist

    Malicious code in @ensdomains/blacklist (npm)

    24 Nov 2025
    No fix available

    @ensdomains/hardhat-chai-matchers-viem

    Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm)

    24 Nov 2025
    No fix available

    @ensdomains/test-utils

    Malicious code in @ensdomains/test-utils (npm)

    24 Nov 2025
    No fix available

    @ensdomains/renewal-widget

    Malicious code in @ensdomains/renewal-widget (npm)

    24 Nov 2025
    No fix available

    @ensdomains/hackathon-registrar

    Malicious code in @ensdomains/hackathon-registrar (npm)

    24 Nov 2025
    No fix available

    zapier-async-storage

    Malicious code in zapier-async-storage (npm)

    24 Nov 2025
    No fix available

    @ensdomains/ccip-read-router

    Malicious code in @ensdomains/ccip-read-router (npm)

    24 Nov 2025
    No fix available

    @asyncapi/nodejs-template

    Malicious code in @asyncapi/nodejs-template (npm)

    24 Nov 2025
    No fix available

    @ensdomains/thorin

    Malicious code in @ensdomains/thorin (npm)

    24 Nov 2025
    No fix available

    @zapier/babel-preset-zapier

    Malicious code in @zapier/babel-preset-zapier (npm)

    24 Nov 2025
    No fix available

    @ensdomains/dnssecoraclejs

    Malicious code in @ensdomains/dnssecoraclejs (npm)

    24 Nov 2025
    No fix available

    redux-router-kit

    Malicious code in redux-router-kit (npm)

    24 Nov 2025
    No fix available

    @ensdomains/ens-avatar

    Malicious code in @ensdomains/ens-avatar (npm)

    24 Nov 2025
    No fix available

    token.js-fork

    Malicious code in token.js-fork (npm)

    24 Nov 2025
    No fix available

    @actbase/react-daum-postcode

    Malicious code in @actbase/react-daum-postcode (npm)

    24 Nov 2025
    No fix available

    @asyncapi/nodejs-ws-template

    Malicious code in @asyncapi/nodejs-ws-template (npm)

    24 Nov 2025
    No fix available

    @posthog/agent

    Malicious code in @posthog/agent (npm)

    24 Nov 2025
    No fix available

    @posthog/plugin-contrib

    Malicious code in @posthog/plugin-contrib (npm)

    24 Nov 2025
    No fix available

    test-hardhat-app

    Malicious code in test-hardhat-app (npm)

    24 Nov 2025
    No fix available

    zuper-cli

    Malicious code in zuper-cli (npm)

    24 Nov 2025
    No fix available

    @ensdomains/ens-validation

    Malicious code in @ensdomains/ens-validation (npm)

    24 Nov 2025
    No fix available

    skills-use

    Malicious code in skills-use (npm)

    24 Nov 2025
    No fix available

    @posthog/piscina

    Malicious code in @posthog/piscina (npm)

    24 Nov 2025
    No fix available

    typeorm-orbit

    Malicious code in typeorm-orbit (npm)

    24 Nov 2025
    No fix available

    orbit-nebula-editor

    Malicious code in orbit-nebula-editor (npm)

    24 Nov 2025
    No fix available

    @trigo/atrix-elasticsearch

    Malicious code in @trigo/atrix-elasticsearch (npm)

    24 Nov 2025
    No fix available

    @posthog/siphash

    Malicious code in @posthog/siphash (npm)

    24 Nov 2025
    No fix available

    @posthog/rrweb-record

    Malicious code in @posthog/rrweb-record (npm)

    24 Nov 2025
    No fix available

    @trigo/atrix-soap

    Malicious code in @trigo/atrix-soap (npm)

    24 Nov 2025
    No fix available