GitHub Advisory Database10 days ago

21 malicious packages published on 2026-10-28 (npm 20, pypi 1)

Including: b20miner, @zaip-ai/cli, black-spindle, itsa-utils, itsa-react-checkbox, @walknpm/todo-cli, dsh-plugin-blender-3d, mock-transactions-sdk…

Published October 28, 2026 · 11:16 PM
Including: b20miner, @zaip-ai/cli, black-spindle, itsa-utils, itsa-react-checkbox, @walknpm/todo-cli, dsh-plugin-blender-3d, mock-transactions-sdk…
Read

Source: GitHub Advisory Database

Ask AI about this articleBeta

The AI only has access to this article — it won't make up facts. Try:

AI can be wrong. Cross-check before sharing.

Supporting evidence0 items
Community check0 comments
No votes yet
0% real0% fake