Zero Radar
Live, last checked 41 of 42 sources reachablelast new information

Malicious packages on npm, PyPI and others. Installed one? Remove it and rotate your secrets. Exploited means attackers already use it, Fixed means a patched version exists. How we rate entries

Yesterday, Sunday 1 November UTC

  1. Critical
    Malware in dsh-screenshot-native

    dsh-screenshot-native

    NewOfficial sourceGHSA-6f53-8jrf-3x9jnpm
  2. Critical
    Malicious code in atlassian-wallboard-plugin (npm)

    atlassian-wallboard-plugin

    Official sourceGHSA-vj43-6r45-847hnpm
  3. Critical
    Mirage2FA AiTM proxy steals Microsoft 365 session cookies despite MFA
    UnverifiedCVE-2026-69836
  4. Critical
    Malicious code in macs-shoaibs-pro17 (RubyGems)

    macs-shoaibs-pro17

    Official sourceGHSA-625f-xj7r-qh7wrubygems
  5. Critical
    Malicious code in privacypass-py (PyPI)

    privacypass-py

    Official sourceGHSA-45w4-c62g-5g5vpip
  6. Critical
    Malicious code in hs-framework (npm)

    hs-framework

    Official sourceGHSA-mmpx-xm69-xmv9npm
  7. Critical
    Malicious code in @axon-web/icons (npm)

    @axon-web/icons

    Official sourceGHSA-jh68-cxw4-pfj2npm
  8. High
    NetamLoader: new .NET loader malware targets government Windows 10 systems in Asia
    Attacks reported (The Hacker News)1 source, unconfirmed
  9. Critical
    Malicious code in pystr-codec (PyPI)

    pystr-codec

    Official sourceGHSA-f93h-mc69-274wpip

Saturday 31 October UTC

  1. Critical
    Malware in @mamans2973/maman

    @mamans2973/maman

    Official sourceGHSA-fg5w-8hhw-8j6hnpm
  2. Critical
    Malicious code in skills-analyzer (PyPI)

    skills-analyzer

    Official sourceGHSA-r92r-m9r8-78vjpip
  3. Critical
    Malicious code in md-to-slides (PyPI)

    md-to-slides

    Official sourceGHSA-7p4v-mm6f-8g5cpip
  4. Critical
    Malicious code in doctreelstm (PyPI)

    doctreelstm

    Official sourceGHSA-5fxv-5qc2-53g8pip
  5. Critical
    Malicious code in is-it-ai (PyPI)

    is-it-ai

    Official sourceGHSA-76h8-w3px-47hxpip
  6. Critical
    Malicious code in multi-convert (PyPI)

    multi-convert

    Official sourceGHSA-vh26-86vj-f72gpip
  7. Critical
    Malware in local-commander-agent

    local-commander-agent

    Official sourceGHSA-7j62-5j84-72fvnpm

Friday 30 October UTC

  1. High
    Trojanized Claude Code extension for Cursor IDE targets developers
    Attacks reported (Dark Reading)1 source, unconfirmed
  2. Critical
    Malware in @pcb-dp/qa-commons

    @pcb-dp/qa-commons

    Official sourceGHSA-w4v4-fj9q-cfj5npm
  3. Critical
    Malware in @sxm-content-creators/tools-ds

    @sxm-content-creators/tools-ds

    Official sourceGHSA-x4jx-pc3h-93v6npm
  4. Critical
    Malware in vas-tops2-reportingui

    vas-tops2-reportingui

    Official sourceGHSA-v8fw-jm5x-fgg2npm
  5. Critical
    Malware in vas-tops2-core-clients-search

    vas-tops2-core-clients-search

    Official sourceGHSA-7r8m-hmch-q36rnpm
  6. Critical
    Malware in vas-tops2-core-client-cleanup-ui

    vas-tops2-core-client-cleanup-ui

    Official sourceGHSA-8j2v-vwh4-x2hmnpm
  7. Critical
    Malware in @tops2/digital-assistant-ui

    @tops2/digital-assistant-ui

    Official sourceGHSA-r7vf-2jch-g55hnpm
  8. Critical
    Malware in vas-tops2-core-property-search

    vas-tops2-core-property-search

    Official sourceGHSA-3p56-fv8q-65jfnpm
  9. Critical
    Malware in vas-tops2-digital-assistant-ui

    vas-tops2-digital-assistant-ui

    Official sourceGHSA-pqp6-xfcj-j37cnpm
  10. Critical
    Malware in vas-tops2-bidmatrix-ui

    vas-tops2-bidmatrix-ui

    Official sourceGHSA-3vw9-xvmr-x46hnpm
  11. Critical
    Malware in ssite-mock-server

    ssite-mock-server

    Official sourceGHSA-h5wr-6cx4-x5v4npm
  12. Critical
    Malware in tefeest-npm-com-test

    tefeest-npm-com-test

    Official sourceGHSA-w7c9-wmgh-2r69npm
  13. Critical
    Malware in claims-acct-unlock

    claims-acct-unlock

    Official sourceGHSA-7338-2qv3-86fwnpm
  14. Critical
    Malware in dependencykfeg

    dependencykfeg

    Official sourceGHSA-7p3p-8gfg-8grqnpm
  15. Critical
    Malware in neuralwhatsapp

    neuralwhatsapp

    Official sourceGHSA-367q-mf84-m8j3npm
  16. Critical
    Malware in wrangler-deploy

    wrangler-deploy

    Official sourceGHSA-5vmf-xjrj-jqhhnpm
  17. Critical
    Malware in ourin-baileys

    ourin-baileys

    Official sourceGHSA-5qgv-v3j9-f64gnpm
  18. Critical
    Malware in apex-fetch

    apex-fetch

    Official sourceGHSA-gm35-cprq-hwp5npm
  19. Critical
    Malware in grizzly-baileys

    grizzly-baileys

    Official sourceGHSA-7vq2-mvjp-g5gfnpm
  20. Critical
    Malware in tabby-fknat

    tabby-fknat

    Official sourceGHSA-2qvg-983g-prh5npm
  21. Malware
    NetamLoader malware targets government Windows systems in Asia
    Attacks reported (The Record)1 source, unconfirmed
  22. Critical
    Malware in tailwindcss-visual-kit

    tailwindcss-visual-kit

    Official sourceGHSA-f37w-2g4f-58r3npm
  23. Critical
    Malware in @nexlayerlabs/postcss-keyframe-utils

    @nexlayerlabs/postcss-keyframe-utils

    Official sourceGHSA-p485-mr88-5q38npm
  24. Critical
    Malware in tailwindcss-effect-lab

    tailwindcss-effect-lab

    Official sourceGHSA-px86-h2q8-cjjrnpm
  25. Critical
    Malicious code in log-utils-sdk (PyPI)

    log-utils-sdk

    Official sourceGHSA-gm8f-99q4-fpjhpip
  26. Critical
    Malicious code in stdid-nyxprobe (PyPI)

    stdid-nyxprobe

    Official sourceGHSA-9g52-4q2j-2cg3pip
  27. High
    Claude Code for VS Code extension compromised (supply-chain incident)
    Attacks reported (oss-security)1 source, unconfirmed
  28. High
    Claude Code VS Code extension on Open VSX reportedly compromised
    Attacks reported (oss-security)1 source, unconfirmed
  29. Critical
    Official Claude Code VS Code extension on Open VSX backdoored with SSH access
    Attacks reported (The Hacker News)1 source, unconfirmed
  30. High
    Malicious Claude Code 2.1.313 extension removed from Cursor marketplace
    Attacks reported (Socket)1 source, unconfirmed
  31. Critical
    Malicious code in claims-acct-unlock (npm)

    claims-acct-unlock

    Official sourceGHSA-73xg-497j-5qqrnpm
  32. Critical
    Malicious code in test-01-rafamarrara-learning-dc (PyPI)

    test-01-rafamarrara-learning-dc

    Official sourceGHSA-9wjc-g5vf-3m22pip
  33. Critical
    Malicious code in twitter-request-diagnostics (PyPI)

    twitter-request-diagnostics

    Official sourceGHSA-w3jr-q4jr-xq95pip