Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    narrow-array

    Malicious code in narrow-array (npm)

    10 Feb 2026
    No fix available

    testppe-pkg

    Malicious code in testppe-pkg (PyPI)

    10 Feb 2026
    No fix available

    dev-pipline-test

    Malicious code in dev-pipline-test (PyPI)

    10 Feb 2026
    No fix available

    devtools-webhook-cicd-utils

    Malicious code in devtools-webhook-cicd-utils (PyPI)

    10 Feb 2026
    No fix available

    ntoutils

    Malicious code in ntoutils (PyPI)

    10 Feb 2026
    No fix available

    jwtdotenv

    Malicious code in jwtdotenv (npm)

    9 Feb 2026
    No fix available

    json-web-sources

    Malicious code in json-web-sources (npm)

    9 Feb 2026
    No fix available

    json-mapping-sources

    Malicious code in json-mapping-sources (npm)

    9 Feb 2026
    No fix available

    react-svg-handler

    Malicious code in react-svg-handler (npm)

    9 Feb 2026
    No fix available

    thecorrectjames

    Malicious code in thecorrectjames (PyPI)

    9 Feb 2026
    No fix available

    ctf-pipline-test

    Malicious code in ctf-pipline-test (PyPI)

    9 Feb 2026
    No fix available

    @skyeng/libs

    Malicious code in @skyeng/libs (npm)

    9 Feb 2026
    No fix available

    http-notifier-test

    Malicious code in http-notifier-test (PyPI)

    9 Feb 2026
    No fix available

    skydeo

    Malicious code in skydeo (PyPI)

    9 Feb 2026
    No fix available

    teligram

    Malicious code in teligram (PyPI)

    8 Feb 2026
    No fix available

    hardixx-code

    Malicious code in hardixx-code (PyPI)

    8 Feb 2026
    No fix available

    grokwrapper

    Malicious code in grokwrapper (PyPI)

    8 Feb 2026
    No fix available

    ccxt-bullish

    Malicious code in ccxt-bullish (PyPI)

    8 Feb 2026
    No fix available

    thread-pipeline-test

    Malicious code in thread-pipeline-test (PyPI)

    8 Feb 2026
    No fix available

    carcent

    Malicious code in carcent (PyPI)

    6 Feb 2026
    No fix available

    web3-chain-sinon

    Malicious code in web3-chain-sinon (npm)

    6 Feb 2026
    No fix available

    web3-sinon

    Malicious code in web3-sinon (npm)

    6 Feb 2026
    No fix available

    aligned-arrays

    Malicious code in aligned-arrays (npm)

    6 Feb 2026
    No fix available

    gridifies

    Malicious code in gridifies (PyPI)

    6 Feb 2026
    No fix available

    breadcrumb-service

    Malicious code in breadcrumb-service (npm)

    6 Feb 2026
    No fix available

    moveworks-pipeline-test

    Malicious code in moveworks-pipeline-test (PyPI)

    6 Feb 2026
    No fix available

    @rdxportal/ui-components

    Malicious code in @rdxportal/ui-components (npm)

    6 Feb 2026
    No fix available

    @rsgweb/modules-core-feedback

    Malicious code in @rsgweb/modules-core-feedback (npm)

    6 Feb 2026
    No fix available

    @rsgweb/modules-core-www-page

    Malicious code in @rsgweb/modules-core-www-page (npm)

    6 Feb 2026
    No fix available

    @rsgweb/rockstar-account

    Malicious code in @rsgweb/rockstar-account (npm)

    6 Feb 2026
    No fix available

    @rsgweb/tina

    Malicious code in @rsgweb/tina (npm)

    6 Feb 2026
    No fix available

    @rsgweb/utils

    Malicious code in @rsgweb/utils (npm)

    6 Feb 2026
    No fix available

    @sbseg-plugin/qbo-web-app-ui

    Malicious code in @sbseg-plugin/qbo-web-app-ui (npm)

    6 Feb 2026
    No fix available

    @meli-lint/eslint-config-base

    Malicious code in @meli-lint/eslint-config-base (npm)

    6 Feb 2026
    No fix available

    @opposhop/nuxt-ssr-cache

    Malicious code in @opposhop/nuxt-ssr-cache (npm)

    6 Feb 2026
    No fix available

    @hashicorp-internal/vault-reporting

    Malicious code in @hashicorp-internal/vault-reporting (npm)

    6 Feb 2026
    No fix available

    @meli-lint/eslint-config-base-ts

    Malicious code in @meli-lint/eslint-config-base-ts (npm)

    6 Feb 2026
    No fix available

    @meli-lint/eslint-config-tests-jest

    Malicious code in @meli-lint/eslint-config-tests-jest (npm)

    6 Feb 2026
    No fix available

    p7zip-full

    Malicious code in p7zip-full (PyPI)

    6 Feb 2026
    No fix available

    syf-typings

    Malicious code in syf-typings (npm)

    6 Feb 2026
    No fix available

    @sporting-life/sportinglife-be

    Malicious code in @sporting-life/sportinglife-be (npm)

    6 Feb 2026
    No fix available

    @sporting-life/sportinglife-betslip-sdk

    Malicious code in @sporting-life/sportinglife-betslip-sdk (npm)

    6 Feb 2026
    No fix available

    @rsgweb/locale-tools

    Malicious code in @rsgweb/locale-tools (npm)

    6 Feb 2026
    No fix available

    monkey-tags

    Malicious code in monkey-tags (npm)

    6 Feb 2026
    No fix available

    ac-array

    Malicious code in ac-array (npm)

    6 Feb 2026
    No fix available

    ac-checksum

    Malicious code in ac-checksum (npm)

    6 Feb 2026
    No fix available

    ac-dom-events

    Malicious code in ac-dom-events (npm)

    6 Feb 2026
    No fix available

    ac-dom-nodes

    Malicious code in ac-dom-nodes (npm)

    6 Feb 2026
    No fix available

    ac-dom-styles

    Malicious code in ac-dom-styles (npm)

    6 Feb 2026
    No fix available

    ac-element-engagement

    Malicious code in ac-element-engagement (npm)

    6 Feb 2026
    No fix available