Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 15 of 37.
- bip32-js@1.0.2 LWA-2026-10088T1195.002T1059.007T1082T1552.001T1005
- hwi-lib@1.0.2 LWA-2026-10086T1059.007T1082T1552.001T1005T1041
- ckcc-protocol@1.0.2 LWA-2026-10087T1059.007T1082T1552.001T1005T1041
- trezor-lib@1.0.2 LWA-2026-10085T1195.002T1059.007T1082T1552.001T1005
- ledger-lib@1.0.2 LWA-2026-10084T1059.007T1082T1552.001T1005T1041
- python-bitcoinlib@1.0.2 LWA-2026-10083T1195.002T1059.007T1082T1552.001T1552.004
- ethereum-sign-utils@1.0.1 LWA-2026-10081T1059.007T1082T1552.001T1041T1071.001
- mnemonic-utils@1.0.1 LWA-2026-10082T1059.007T1552.001T1082T1005T1041
- transform-es2015-unicode-regex@6.24.1 LWA-2026-10076T1195.002T1105
- de-morgan@2.1.3 LWA-2026-10075T1195.002T1105
- emulative@1.0.1 LWA-2026-10074T1059.007T1082T1005T1041
- vitest-preview-pro@10.0.3 LWA-2026-10073T1195.002T1059.007T1105T1027T1082
- @tuluax/errb@3.0.1 LWA-2026-10071T1059.007T1059T1105T1071.001T1573
- @or-sdk/base@0.44.6 LWA-2026-10070T1059.007T1105T1027T1082
- @or-sdk/sdk-api@0.29.4 LWA-2026-10072T1195.002T1059.007T1105T1027
- @onereach/ui-components@27.0.4 LWA-2026-10069T1059.007T1105T1059
- @onereach/ui-components-vue2@27.0.4 LWA-2026-10067T1059.007T1105T1027
- @or-sdk/providers@0.3.8 LWA-2026-10066T1059.007T1105T1027T1195.002
- @or-sdk/event-manager@1.1.7 LWA-2026-10065T1059.007T1105T1195.002T1027
- @or-sdk/contacts@4.7.7 LWA-2026-10062T1059.007T1027T1105
- @or-sdk/agents@4.21.5 LWA-2026-10064T1059.007T1105T1027
- @or-sdk/druid@1.4.9 LWA-2026-10061T1059.007T1105T1027
- @or-sdk/data-hub-svc@2.3.7 LWA-2026-10060T1059.007T1027T1195.002
- @or-sdk/key-value-storage@0.28.8 LWA-2026-10059T1059.007T1105T1027T1195.002
- @or-sdk/sku-builder@2.5.3 LWA-2026-10063T1059.007T1105T1027T1195.002
- @or-sdk/account-settings@1.3.8 LWA-2026-10057T1059.007T1105T1027T1195.002
- @or-sdk/notifications@1.7.7 LWA-2026-10058T1059.007T1105T1027
- @or-sdk/queue-manager@1.4.8 LWA-2026-10054T1059.007T1105T1027
- @or-sdk/library-categories@0.2.8 LWA-2026-10052T1059.007T1105T1027T1195.002
- @or-sdk/content-request@0.2.8 LWA-2026-10053T1059.007T1105T1027T1195.002
- @or-sdk/adapters@0.3.8 LWA-2026-10055T1059.007T1027T1105
- @or-sdk/tables@0.28.7 LWA-2026-10051T1059.007T1105T1027T1195.002
- @or-sdk/store@2.1.7 LWA-2026-10048T1195.002T1059.007T1105T1027
- @or-sdk/bots@1.7.3 LWA-2026-10049T1059.007T1105T1027T1195.002
- @or-sdk/library@0.5.8 LWA-2026-10046T1059.007T1027.002T1105
- @or-sdk/card-templates@2.2.7 LWA-2026-10045T1059.007T1105T1027
- @or-sdk/keys@1.2.8 LWA-2026-10047T1059.007T1105T1027T1195.002
- @or-sdk/view-templates@2.2.7 LWA-2026-10050T1059.007T1105T1195.002
- @or-sdk/graph@1.10.7 LWA-2026-10043T1059.007T1105T1027
- @or-sdk/apps@1.2.8 LWA-2026-10044T1059.007T1027T1105
- @or-sdk/cards@1.2.7 LWA-2026-10040T1059.007T1105T1027T1195.002
- @or-sdk/lookup@1.25.3 LWA-2026-10042T1059.007T1105T1195.002
- @or-sdk/data-hub@0.26.7 LWA-2026-10041T1195.002T1059.007T1105T1027
- webdev-conf@5.0.0 LWA-2026-10039T1059.007T1105T1071.001T1573T1027
- @or-sdk/library-source@0.4.7 LWA-2026-10033T1059.007T1105T1027T1195.002
- @or-sdk/knowledge-models@0.25.7 LWA-2026-10031T1059.007T1105T1027
- @or-sdk/deployments@2.1.7 LWA-2026-10035T1059.007T1105T1027
- @or-sdk/invitations@1.4.10 LWA-2026-10034T1059.007T1027.001T1105T1195.002
- @or-sdk/markdowner@0.5.3 LWA-2026-10030T1059.007T1027T1105
- @or-sdk/payments@3.2.7 LWA-2026-10029T1059.007T1105T1027
- @or-sdk/flow-templates@2.1.7 LWA-2026-10025T1059.007T1105T1027
- @or-sdk/idw-skill@1.4.3 LWA-2026-10026T1059.007T1105T1027
- @or-sdk/api-tokens@1.4.4 LWA-2026-10024T1059.007T1105T1027T1195.002
- @or-sdk/views@3.1.7 LWA-2026-10023T1059.007T1105T1027
- @or-sdk/tickets@1.9.7 LWA-2026-9768T1059.007T1105T1027
- @or-sdk/password@1.3.8 LWA-2026-9766T1059.007T1105T1195.002
- @or-sdk/mcp-tools@0.5.4 LWA-2026-9767T1059.007T1105T1027T1195.002
- @or-sdk/source@2.1.7 LWA-2026-8912T1059.007T1027T1105
- @onereach/expression-components@9.1.3 LWA-2026-8028T1059.007T1105
- @servicetitan/anvil-token@0.4.4 LWA-2026-8029T1059.007T1105T1027
- @or-sdk/tags@1.1.7 LWA-2026-8034T1059.007T1027T1195.002
- @onereach/rwc-client@6.4.9 LWA-2026-8024T1059.007T1195.002T1105
- @or-sdk/transcripts@1.2.7 LWA-2026-8027T1059.007T1105T1027
- @or-sdk/identifiers@0.27.8 LWA-2026-8023T1059.007T1027T1105T1195.002
- @servicetitan/cp-mfe-dev@1.115.4 LWA-2026-8026T1059.007T1105
- @or-sdk/api-tokens-lambda@1.4.4 LWA-2026-8025T1059.007T1105
- @servicetitan/grid@0.0.66 LWA-2026-8021T1059.007T1105T1195.002
- @onereach/v-event-calendar@0.1.24 LWA-2026-8015T1059.007T1105T1027
- @onereach/webform@0.3.15 LWA-2026-8014
- @or-sdk/bot-templates@2.2.7 LWA-2026-8016T1195.002T1059.007T1027
- @onereach/or-content-builder-renderer@0.0.4 LWA-2026-8018T1059.007T1105T1195.002
- @or-sdk/qna@3.4.4 LWA-2026-8017T1059.007T1105T1027T1195.002
- @onereach/orest-input-cli@1.18.3 LWA-2026-8013T1059.007T1105T1027T1195.002
- @onereach/or-browser-next@0.0.13 LWA-2026-8009T1059.007T1105T1027T1195.002
- @or-sdk/source-api@1.1.3 LWA-2026-8008T1059.007T1105
- @onereach/or-file-uploader-next@0.0.10 LWA-2026-8005T1059.007T1105T1195.002T1027
- @servicetitan/line-item-editor@1.5.4 LWA-2026-8004T1059.007T1105
- @onereach/slack-helpers@1.0.5 LWA-2026-8003T1059.007T1105T1071T1048T1082
- @onereach/types-contacts-api@9.0.10 LWA-2026-8002T1059.007T1105T1027
- @onereach/or-sdk-agent-cli@0.0.8 LWA-2026-8001T1059.007T1105T1195.002
- @or-sdk/chat@0.3.3 LWA-2026-7999T1059.007T1105T1195.002
- @onereach/orest-cli@2.4.3 LWA-2026-8000T1195.002T1059.007T1105T1027
- @onereach/lambda-invocation@1.2.3 LWA-2026-7998T1059.007T1027T1105
- @onereach/phonenumber-interpreter@0.0.20 LWA-2026-7996T1059.007T1105T1027
- @or-sdk/library-types-v1@9.0.3 LWA-2026-7997T1059.007T1105T1027
- @onereach/orest-vue-demi-vue3@0.0.6 LWA-2026-7995T1059.007T1027
- @onereach/si-root@0.9.6 LWA-2026-7994T1059.007T1027T1105
- @onereach/step-conversation@1.0.43 LWA-2026-7986T1059.007T1105
- @or-sdk/library-types-v2@9.0.3 LWA-2026-7985T1059.007T1105
- @servicetitan/startup-mfe-compat@0.5.3 LWA-2026-7981T1059.007T1027T1105
- @or-sdk/hitl@0.41.2 LWA-2026-7980T1059.007T1105
- @servicetitan/carto-charts-core@0.0.6 LWA-2026-7982T1059.007T1105T1027
- @onereach/step-run-snowflake-query@0.1.3 LWA-2026-7983T1059.007T1105T1027
- @onereach/postcss-scoped-selector@1.2.3 LWA-2026-7984T1059.007T1105
- @workbench-stack/core@3.9.8 LWA-2026-7979T1059.007T1027
- @onereach/orest-vue3@0.0.6 LWA-2026-7978T1059.007T1195.002
- @servicetitan/quick-actions@1.15.5 LWA-2026-7970T1059.007T1105T1027
- @onereach/regular-expressions@0.5.25 LWA-2026-7968T1059.007T1105
- @onereach/messengers-infobip-sdk@0.1.3 LWA-2026-7967T1195.002T1059.007T1105
- @servicetitan/html-sketchapp@4.2.11 LWA-2026-7966T1195.002T1059.007T1105T1027
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.