Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    @custombots/custombot

    Malicious code in @custombots/custombot (npm)

    2 Aug 2026
    No fix available

    pp-react-worldready

    Malicious code in pp-react-worldready (npm)

    1 Aug 2026
    No fix available

    nvtorch-oot-nightly

    Malicious code in nvtorch-oot-nightly (PyPI)

    1 Aug 2026
    No fix available

    trtllm-subdir-test

    Malicious code in trtllm-subdir-test (PyPI)

    1 Aug 2026
    No fix available

    test-dev-host

    Malicious code in test-dev-host (npm)

    1 Aug 2026
    No fix available

    test-dev-boot

    Malicious code in test-dev-boot (npm)

    1 Aug 2026
    No fix available

    test-dev-watch

    Malicious code in test-dev-watch (npm)

    1 Aug 2026
    No fix available

    test-dev-link

    Malicious code in test-dev-link (npm)

    1 Aug 2026
    No fix available

    test-dev-sync

    Malicious code in test-dev-sync (npm)

    1 Aug 2026
    No fix available

    test-dev-store

    Malicious code in test-dev-store (npm)

    1 Aug 2026
    No fix available

    test-dev-exec

    Malicious code in test-dev-exec (npm)

    1 Aug 2026
    No fix available

    test-dev-dispatch

    Malicious code in test-dev-dispatch (npm)

    1 Aug 2026
    No fix available

    @moxfive-llc/common

    Malicious code in @moxfive-llc/common (npm)

    1 Aug 2026
    No fix available

    @spending-behavior-ui/widget-insights

    Malicious code in @spending-behavior-ui/widget-insights (npm)

    31 Jul 2026
    No fix available

    @sw-commons-components/message-upsell

    Malicious code in @sw-commons-components/message-upsell (npm)

    31 Jul 2026
    No fix available

    @spending-behavior-ui/cashflow-widget

    Malicious code in @spending-behavior-ui/cashflow-widget (npm)

    31 Jul 2026
    No fix available

    @sof-assistant-fe-lib/vertical-faqs

    Malicious code in @sof-assistant-fe-lib/vertical-faqs (npm)

    31 Jul 2026
    No fix available

    @one-chat/react

    Malicious code in @one-chat/react (npm)

    31 Jul 2026
    No fix available

    @nordic-dev/linting-tools

    Malicious code in @nordic-dev/linting-tools (npm)

    31 Jul 2026
    No fix available

    @mplay-frontend-ui/link

    Malicious code in @mplay-frontend-ui/link (npm)

    31 Jul 2026
    No fix available

    @mplay-core-lib/utilities

    Malicious code in @mplay-core-lib/utilities (npm)

    31 Jul 2026
    No fix available

    @mp-op-ss-front-lib/tracks

    Malicious code in @mp-op-ss-front-lib/tracks (npm)

    31 Jul 2026
    No fix available

    @meli-testing/jest-react

    Malicious code in @meli-testing/jest-react (npm)

    31 Jul 2026
    No fix available

    @fuji-web-components/maps

    Malicious code in @fuji-web-components/maps (npm)

    31 Jul 2026
    No fix available

    @finance-ui/finance-view

    Malicious code in @finance-ui/finance-view (npm)

    31 Jul 2026
    No fix available

    @global-theme/context

    Malicious code in @global-theme/context (npm)

    31 Jul 2026
    No fix available

    metrics-ui

    Malicious code in metrics-ui (npm)

    31 Jul 2026
    No fix available

    @finance-ui/snackbar-ifpe

    Malicious code in @finance-ui/snackbar-ifpe (npm)

    31 Jul 2026
    No fix available

    @cr-invested-ui-components/chart

    Malicious code in @cr-invested-ui-components/chart (npm)

    31 Jul 2026
    No fix available

    telerape

    Malicious code in telerape (PyPI)

    31 Jul 2026
    No fix available

    refbase-mcp

    Malicious code in refbase-mcp (npm)

    31 Jul 2026
    No fix available

    hit-mcp

    Malicious code in hit-mcp (npm)

    31 Jul 2026
    No fix available

    allurectl

    Malicious code in allurectl (npm)

    31 Jul 2026
    No fix available

    mcp-server-boilerplate

    Malicious code in mcp-server-boilerplate (npm)

    31 Jul 2026
    No fix available

    iwomm-mcp

    Malicious code in iwomm-mcp (npm)

    31 Jul 2026
    No fix available

    paraglide-js

    Malicious code in paraglide-js (npm)

    31 Jul 2026
    No fix available

    community-published

    Malicious code in community-published (npm)

    31 Jul 2026
    No fix available

    chaos-mcp

    Malicious code in chaos-mcp (npm)

    31 Jul 2026
    No fix available

    gtm-mcp-auth

    Malicious code in gtm-mcp-auth (npm)

    31 Jul 2026
    No fix available

    create-remotion

    Malicious code in create-remotion (npm)

    31 Jul 2026
    No fix available

    sap-mcp-facilitator

    Malicious code in sap-mcp-facilitator (npm)

    31 Jul 2026
    No fix available

    maximumsats-mcp

    Malicious code in maximumsats-mcp (npm)

    31 Jul 2026
    No fix available

    adpanel-core

    Malicious code in adpanel-core (npm)

    31 Jul 2026
    No fix available

    sap-mcp-config

    Malicious code in sap-mcp-config (npm)

    31 Jul 2026
    No fix available

    attio-discover

    Malicious code in attio-discover (npm)

    31 Jul 2026
    No fix available

    hazmat-cfr

    Malicious code in hazmat-cfr (npm)

    31 Jul 2026
    No fix available

    capacitor-assets

    Malicious code in capacitor-assets (npm)

    31 Jul 2026
    No fix available

    kip-mcp-http

    Malicious code in kip-mcp-http (npm)

    31 Jul 2026
    No fix available

    pm-claude-skills-mcp

    Malicious code in pm-claude-skills-mcp (npm)

    31 Jul 2026
    No fix available

    fast-csv-helper

    Malicious code in fast-csv-helper (npm)

    31 Jul 2026
    No fix available