Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    chai-grab

    Malicious code in chai-grab (npm)

    4 Feb 2026
    No fix available

    z-shop-event-bus

    Malicious code in z-shop-event-bus (npm)

    4 Feb 2026
    No fix available

    z-shop-js-env

    Malicious code in z-shop-js-env (npm)

    4 Feb 2026
    No fix available

    z-shop-ui

    Malicious code in z-shop-ui (npm)

    4 Feb 2026
    No fix available

    zalando-consent-api

    Malicious code in zalando-consent-api (npm)

    4 Feb 2026
    No fix available

    zappr

    Malicious code in zappr (npm)

    4 Feb 2026
    No fix available

    chai-async-promised

    Malicious code in chai-async-promised (npm)

    4 Feb 2026
    No fix available

    dotenv-embedded

    Malicious code in dotenv-embedded (npm)

    4 Feb 2026
    No fix available

    http-emailjs

    Malicious code in http-emailjs (npm)

    4 Feb 2026
    No fix available

    https-emailjs

    Malicious code in https-emailjs (npm)

    4 Feb 2026
    No fix available

    @fxinternal/netdiagnostics

    Malicious code in @fxinternal/netdiagnostics (npm)

    4 Feb 2026
    No fix available

    express-groups-routes

    Malicious code in express-groups-routes (npm)

    4 Feb 2026
    No fix available

    mongooose_update

    Malicious code in mongooose_update (npm)

    4 Feb 2026
    No fix available

    si-wsl

    Malicious code in si-wsl (npm)

    4 Feb 2026
    No fix available

    mongoose_update

    Malicious code in mongoose_update (npm)

    4 Feb 2026
    No fix available

    ongose

    Malicious code in ongose (npm)

    4 Feb 2026
    No fix available

    react-sdkk

    Malicious code in react-sdkk (npm)

    4 Feb 2026
    No fix available

    reactt-sdkk

    Malicious code in reactt-sdkk (npm)

    4 Feb 2026
    No fix available

    rreact-sdk

    Malicious code in rreact-sdk (npm)

    4 Feb 2026
    No fix available

    mongooose_updated

    Malicious code in mongooose_updated (npm)

    4 Feb 2026
    No fix available

    incode-kyc-backend

    Malicious code in incode-kyc-backend (npm)

    3 Feb 2026
    No fix available

    js-unpack

    Malicious code in js-unpack (npm)

    3 Feb 2026
    No fix available

    @devgandhi/healthpulse

    Malicious code in @devgandhi/healthpulse (npm)

    3 Feb 2026
    No fix available

    @devgandhi/cpp

    Malicious code in @devgandhi/cpp (npm)

    3 Feb 2026
    No fix available

    testing-package-xdsfdsfsc

    Malicious code in testing-package-xdsfdsfsc (npm)

    3 Feb 2026
    No fix available

    @x-clients/features

    Malicious code in @x-clients/features (npm)

    3 Feb 2026
    No fix available

    serpapi-python

    Malicious code in serpapi-python (PyPI)

    3 Feb 2026
    No fix available

    filespath

    Malicious code in filespath (PyPI)

    3 Feb 2026
    No fix available

    tabulapys

    Malicious code in tabulapys (PyPI)

    3 Feb 2026
    No fix available

    tokyo-ppe-test

    Malicious code in tokyo-ppe-test (PyPI)

    3 Feb 2026
    No fix available

    tableshow

    Malicious code in tableshow (PyPI)

    3 Feb 2026
    No fix available

    pathlib-v2-utility

    Malicious code in pathlib-v2-utility (PyPI)

    3 Feb 2026
    No fix available

    pathfiles

    Malicious code in pathfiles (PyPI)

    3 Feb 2026
    No fix available

    fileupload-util

    Malicious code in fileupload-util (npm)

    3 Feb 2026
    No fix available

    tailwindcss-forms-kit

    Malicious code in tailwindcss-forms-kit (npm)

    3 Feb 2026
    No fix available

    tableapys

    Malicious code in tableapys (PyPI)

    3 Feb 2026
    No fix available

    tsconfig-stitch

    Malicious code in tsconfig-stitch (npm)

    3 Feb 2026
    No fix available

    eslint-config-nlx

    Malicious code in eslint-config-nlx (npm)

    3 Feb 2026
    No fix available

    eslint-config-stitch

    Malicious code in eslint-config-stitch (npm)

    3 Feb 2026
    No fix available

    fingerprint-stitch

    Malicious code in fingerprint-stitch (npm)

    3 Feb 2026
    No fix available

    graphrix

    Malicious code in graphrix (npm)

    3 Feb 2026
    No fix available

    tarax

    Malicious code in tarax (npm)

    3 Feb 2026
    No fix available

    @uselagoon/ui-library

    Malicious code in @uselagoon/ui-library (npm)

    3 Feb 2026
    No fix available

    internallib_v782

    Malicious code in internallib_v782 (npm)

    3 Feb 2026
    No fix available

    strengthifys

    Malicious code in strengthifys (npm)

    3 Feb 2026
    No fix available

    react-responsive-carousel-v4

    Malicious code in react-responsive-carousel-v4 (npm)

    3 Feb 2026
    No fix available

    epic-admin-ui

    Malicious code in epic-admin-ui (npm)

    3 Feb 2026
    No fix available

    frontend-js-state-web

    Malicious code in frontend-js-state-web (npm)

    3 Feb 2026
    No fix available

    l2-contracts

    Malicious code in l2-contracts (npm)

    3 Feb 2026
    No fix available

    kwp-analytics

    Malicious code in kwp-analytics (npm)

    3 Feb 2026
    No fix available