Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    stillm4ddpocs-demo-sprocket

    Malicious code in stillm4ddpocs-demo-sprocket (npm)

    23 Aug 2026
    No fix available

    stillm4ddpocs-rtest-alpha

    Malicious code in stillm4ddpocs-rtest-alpha (npm)

    23 Aug 2026
    No fix available

    @postman-cse/okta-aio-darwin-arm64

    Malicious code in @postman-cse/okta-aio-darwin-arm64 (npm)

    23 Aug 2026
    No fix available

    stillm4ddpocs-demo-gadget

    Malicious code in stillm4ddpocs-demo-gadget (npm)

    22 Aug 2026
    No fix available

    stillm4ddpocs-demo-widget

    Malicious code in stillm4ddpocs-demo-widget (npm)

    22 Aug 2026
    No fix available

    internallib_v902

    Malicious code in internallib_v902 (npm)

    22 Aug 2026
    No fix available

    scrambleeeer

    Malicious code in scrambleeeer (PyPI)

    22 Aug 2026
    No fix available

    @postman-cse/okta-aio-linux-arm64

    Malicious code in @postman-cse/okta-aio-linux-arm64 (npm)

    22 Aug 2026
    No fix available

    lumen-pages-community

    Malicious code in lumen-pages-community (npm)

    21 Aug 2026
    No fix available

    fuel-react

    Malicious code in fuel-react (npm)

    21 Aug 2026
    No fix available

    kelly-sizing

    Malicious code in kelly-sizing (npm)

    21 Aug 2026
    No fix available

    @gfe/lx-watcher

    Malicious code in @gfe/lx-watcher (npm)

    21 Aug 2026
    No fix available

    totp-utils

    Malicious code in totp-utils (npm)

    21 Aug 2026
    No fix available

    tailwind-animate-css-plugin

    Malicious code in tailwind-animate-css-plugin (npm)

    21 Aug 2026
    No fix available

    requests-crypt

    Malicious code in requests-crypt (PyPI)

    21 Aug 2026
    No fix available

    scrambleeer

    Malicious code in scrambleeer (PyPI)

    21 Aug 2026
    No fix available

    boto4

    Malicious code in boto4 (PyPI)

    21 Aug 2026
    No fix available

    @next-fonts/font

    Malicious code in @next-fonts/font (npm)

    21 Aug 2026
    No fix available

    mcq-session

    Malicious code in mcq-session (npm)

    21 Aug 2026
    No fix available

    moidevy

    Malicious code in moidevy (npm)

    21 Aug 2026
    No fix available

    express-session-handler

    Malicious code in express-session-handler (npm)

    21 Aug 2026
    No fix available

    @js-lib-team/env-parser

    Malicious code in @js-lib-team/env-parser (npm)

    21 Aug 2026
    No fix available

    chai-as-soul

    Malicious code in chai-as-soul (npm)

    21 Aug 2026
    No fix available

    coin-fees

    Malicious code in coin-fees (npm)

    21 Aug 2026
    No fix available

    reqcrypts

    Malicious code in reqcrypts (PyPI)

    21 Aug 2026
    No fix available

    exam-kit

    Malicious code in exam-kit (npm)

    20 Aug 2026
    No fix available

    @pablo_clueless/sniffr

    Malicious code in @pablo_clueless/sniffr (npm)

    20 Aug 2026
    No fix available

    @pablo_clueless/printr

    Malicious code in @pablo_clueless/printr (npm)

    20 Aug 2026
    No fix available

    ethereum-validator

    Malicious code in ethereum-validator (npm)

    20 Aug 2026
    No fix available

    goldstar-api-server

    Malicious code in goldstar-api-server (npm)

    20 Aug 2026
    No fix available

    create-react-app-text

    Malicious code in create-react-app-text (npm)

    20 Aug 2026
    No fix available

    create-react-app-ux

    Malicious code in create-react-app-ux (npm)

    20 Aug 2026
    No fix available

    create-react-app-ui

    Malicious code in create-react-app-ui (npm)

    20 Aug 2026
    No fix available

    cig-data-patcher

    Malicious code in cig-data-patcher (npm)

    20 Aug 2026
    No fix available

    debug-fnt

    Malicious code in debug-fnt (npm)

    20 Aug 2026
    No fix available

    frenchworldcupwin

    Malicious code in frenchworldcupwin (npm)

    20 Aug 2026
    No fix available

    test-flow-1

    Malicious code in test-flow-1 (npm)

    20 Aug 2026
    No fix available

    test-flow-entire6

    Malicious code in test-flow-entire6 (npm)

    20 Aug 2026
    No fix available

    test-flow-entire7

    Malicious code in test-flow-entire7 (npm)

    20 Aug 2026
    No fix available

    fetch-webjs-script

    Malicious code in fetch-webjs-script (npm)

    20 Aug 2026
    No fix available

    @httttt/mcp-demo

    Malicious code in @httttt/mcp-demo (npm)

    20 Aug 2026
    No fix available

    expect-dotenv

    Malicious code in expect-dotenv (npm)

    20 Aug 2026
    No fix available

    aovine

    Malicious code in aovine (crates.io)

    20 Aug 2026
    No fix available

    append-only-vec

    Malicious code in append_only_vec (crates.io)

    20 Aug 2026
    No fix available

    arone

    Malicious code in arone (crates.io)

    20 Aug 2026
    No fix available

    aronenao

    Malicious code in aronenao (crates.io)

    20 Aug 2026
    No fix available

    internment

    Malicious code in internment (crates.io)

    20 Aug 2026
    No fix available

    proc-macro1

    Malicious code in proc_macro1 (crates.io)

    20 Aug 2026
    No fix available

    proc-macro-en

    Malicious code in proc_macro_en (crates.io)

    20 Aug 2026
    No fix available

    tinymember

    Malicious code in tinymember (crates.io)

    20 Aug 2026
    No fix available