syntax-class-constructor-call
npmMAL-0000-phantomraven-syntax-class-constructor-call
Malicious npm package: syntax-class-constructor-call (PhantomRaven campaign, Wave 3)
transform-es2015-parameters
npmMAL-0000-phantomraven-transform-es2015-parameters
Malicious npm package: transform-es2015-parameters (PhantomRaven campaign, Wave 3)
transform-undefined-to-void
npmMAL-0000-phantomraven-transform-undefined-to-void
Malicious npm package: transform-undefined-to-void (PhantomRaven campaign, Wave 2)
filenames-simple
npmMAL-0000-phantomraven-filenames-simple
Malicious npm package: filenames-simple (PhantomRaven campaign, Wave 2)
transform-proto-to-assign
npmMAL-0000-phantomraven-transform-proto-to-assign
Malicious npm package: transform-proto-to-assign (PhantomRaven campaign, Wave 3)
add-react-displayname
npmMAL-0000-phantomraven-add-react-displayname
Malicious npm package: add-react-displayname (PhantomRaven campaign, Wave 3)
yoshi-base
npmMAL-0000-phantomraven-yoshi-base
Malicious npm package: yoshi-base (PhantomRaven campaign, Wave 2)
typescript-rtk-query
npmMAL-0000-phantomraven-typescript-rtk-query
Malicious npm package: typescript-rtk-query (PhantomRaven campaign, Wave 2)
import-zod
npmMAL-0000-phantomraven-import-zod
Malicious npm package: import-zod (PhantomRaven campaign, Wave 4)
transform-es2015-duplicate-keys
npmMAL-0000-phantomraven-transform-es2015-duplicate-keys
Malicious npm package: transform-es2015-duplicate-keys (PhantomRaven campaign, Wave 3)
syntax-function-bind
npmMAL-0000-phantomraven-syntax-function-bind
Malicious npm package: syntax-function-bind (PhantomRaven campaign, Wave 3)
syntax-do-expressions
npmMAL-0000-phantomraven-syntax-do-expressions
Malicious npm package: syntax-do-expressions (PhantomRaven campaign, Wave 3)
transform-inline-consecutive-adds
npmMAL-0000-phantomraven-transform-inline-consecutive-adds
Malicious npm package: transform-inline-consecutive-adds (PhantomRaven campaign, Wave 3)
react-you-might-not-need-an-effect
npmMAL-0000-phantomraven-react-you-might-not-need-an-effect
Malicious npm package: react-you-might-not-need-an-effect (PhantomRaven campaign, Wave 2)
import-newlines
npmMAL-0000-phantomraven-import-newlines
Malicious npm package: import-newlines (PhantomRaven campaign, Wave 2)
es6-recommended
npmMAL-0000-phantomraven-es6-recommended
Malicious npm package: es6-recommended (PhantomRaven campaign, Wave 2)
syntax-decorators
npmMAL-0000-phantomraven-syntax-decorators
Malicious npm package: syntax-decorators (PhantomRaven campaign, Wave 2)
pymnemonic
PyPIMAL-2026-1438
Malicious code in pymnemonic (PyPI)
do-not-install-this-package-004
PyPIMAL-2026-1436
Malicious code in do-not-install-this-package-004 (PyPI)
flowpeek
PyPIMAL-2026-1437
Malicious code in flowpeek (PyPI)
kvstore-pb2-grpc
PyPIMAL-2026-1433
Malicious code in kvstore-pb2-grpc (PyPI)
dgl-cu117
PyPIMAL-2026-1432
Malicious code in dgl-cu117 (PyPI)
python-anchor
PyPIMAL-2026-1435
Malicious code in python-anchor (PyPI)
my-super-lib
PyPIMAL-2026-1434
Malicious code in my-super-lib (PyPI)