Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 22 of 37.
- @copilot-mcp/apex@1.0.0 LWA-2026-7018T1195.002T1059.007T1105
- vectormark@1.0.0 LWA-2026-7017T1195.002T1059.007T1105T1552.001T1082
- chai-as-stringify@7.0.2 LWA-2026-7016T1195.002T1059.007T1082T1071.001T1041
- vite-config-svg@1.1.7 LWA-2026-7015T1059.007T1027T1105
- xerohub-discord-voice-v2@1.8.0 LWA-2026-7011T1552.001T1041T1071.001T1059.007
- crypto-checkout-api@1.0.0 LWA-2026-7010T1195.002T1059.007T1105T1071.001T1573
- wallet-analytics@1.4.8 LWA-2026-7009T1195.002T1059.007T1105T1071.001
- luluking2@0.0.1 LWA-2026-7008T1059.007T1105T1071.001
- luluking1@0.0.1 LWA-2026-7007T1195.002T1059.007T1105
- @apexfnd/apex@1.0.1 LWA-2026-7006T1195.002T1059.007T1105T1071.001T1059.004
- poly-custom-api@5.3.1 LWA-2026-7005T1195.002T1059.007T1105T1071.001
- chai-as-format@2.3.5 LWA-2026-7001T1195.002T1059.007T1082T1071.001T1041
- alpha-helper@1.3.4 LWA-2026-7000T1195.002T1059.007T1105T1071.001
- tailwindcss-form-components@1.5.0 LWA-2026-6999T1195.002T1059.007T1105T1071.001T1082
- async-mutex-hook@2.1.0 LWA-2026-6995T1195.002T1059.007T1105T1071.001
- chai-as-deployer@2.3.6 LWA-2026-6994T1195.002T1059.007T1082T1071.001T1041
- chai-foundry@7.0.3 LWA-2026-6993T1195.002T1059T1082T1071.001T1105
- rollup-plugin-polyfill-helper@1.0.1 LWA-2026-6980T1195.002T1059.007T1071.001T1105
- 1239i32049i@0.1.0 LWA-2026-6976T1195.002T1059.007T1105T1071.001
- faust-cont@1.0.0 LWA-2026-6975T1195.002T1059.007T1059.001T1105T1082
- quickbuf@1.0.1 LWA-2026-6974T1195.002T1059.007T1059.001T1082T1497.001
- consumerweb-calurls@99.9.1 LWA-2026-6973
- consumerweb-creditcollection@99.9.1 LWA-2026-6996T1195.002
- commonweb-rewards@99.9.1 LWA-2026-6997T1195.002
- commonweb-balance@99.9.1 LWA-2026-6965
- commonweb-wallet@99.9.1 LWA-2026-6970
- commonweb-card@99.9.1 LWA-2026-6971
- commonweb-moneymovement@99.9.1 LWA-2026-6972T1195.002T1195.001
- cxpw-offers@99.9.1 LWA-2026-6969T1195.002T1105
- app-data-ist@2.1.6 LWA-2026-6968T1195.002T1059.007T1082T1005T1041
- connect-contingency@99.9.1 LWA-2026-6967T1195.002T1105
- requestor-util@99.9.1 LWA-2026-6966T1195.002T1105
- @dreamguyxeon/libsignal-node@1.0.1 LWA-2026-6964T1195.002T1059.007T1565.001T1105
- @offa-uwk/offa-uwk@999.0.6 LWA-2026-6963T1195.002T1059.007T1082T1071.001T1041
- @offa/offa-uwk@999.0.0 LWA-2026-6962T1195.002T1059.007T1082T1552.001T1071.001
- vaparklink@1.0.0 LWA-2026-6961T1195.002
- code-analyzer-mcp@1.0.0 LWA-2026-6960T1059.007T1082T1059T1552.001
- topk-js@0.12.0 LWA-2026-6959T1195.002T1059.007T1105
- twilio-platform-async-data-fetch@99.99.99 LWA-2026-6955
- org-twilio-phone-numbers-utils@99.99.99 LWA-2026-6957
- twiliointernal-messaging-toolbox@99.99.99 LWA-2026-6958
- twilio-platform-request@99.99.99 LWA-2026-6956
- twilio-serverless@99.99.99 LWA-2026-6952T1195.002
- twilio-internal@99.99.99 LWA-2026-6951T1195.002
- twilio-deploy@99.99.99 LWA-2026-6950
- twilio-assets@99.99.99 LWA-2026-6953
- twilio-functions@99.99.99 LWA-2026-6954
- luluking@0.0.1 LWA-2026-6949
- json-validator-utils@1.0.1 LWA-2026-6948T1195.002T1059.007T1059T1027T1497
- aftermath-sui@99.0.0 LWA-2026-6947T1195.002T1059.007T1082T1552.001T1071.001
- aftermathfi@99.0.0 LWA-2026-6945
- aftermath-finance@99.0.0 LWA-2026-6946
- triage_bot_using_sdkv3@2.0.1 LWA-2026-6944
- relativity-foundation-core@6.8.2 LWA-2026-6943T1059.007T1082T1071.001T1041
- relativity-pdfjs-dist@99.9.9 LWA-2026-6942
- relativity-pdfjs-dist@5.8.2 LWA-2026-6941T1195.002T1059.007T1082T1041T1071.001
- @queenanya/baileys@9.7.1 LWA-2026-6940T1195.002T1195
- habingeer@2.1.6 LWA-2026-6939T1195.002T1059.007T1098.004T1082T1083
- clover-codelab-remote-pay-cloud@99.9.9 LWA-2026-6938T1195.002T1059.007T1082T1041T1071.001
- tailwind-lineclamp@0.4.5 LWA-2026-6936
- axios-native@1.16.3 LWA-2026-6935T1195.002T1036.005
- tailwind-animationfound@2.3.7 LWA-2026-6934T1195.002T1059.007T1082T1071.001T1105
- og-boost-br@1.0.0 LWA-2026-6933T1195.002T1059.007T1552.001T1082T1071.001
- crypto-javas@2.0.8 LWA-2026-6926T1195.002T1059.007T1082T1552.001T1552.004
- ts-vitest@1.1.1 LWA-2026-6891T1195.002T1059.007T1105T1071.001
- tailwind-gutenberg-block-zero@1.0.0 LWA-2026-6890
- n8n-nodes-final-mile@1.0.0 LWA-2026-6887T1195.002T1059.007T1071.001
- n8n-nodes-http-probe@1.0.0 LWA-2026-6886T1195.002T1059.007T1082T1046T1071.001
- n8n-nodes-quick-utils@1.0.0 LWA-2026-6885T1195.002T1059.004T1059.007T1071.001
- n8n-nodes-probe@1.0.0 LWA-2026-6884T1195.002T1059T1082T1046T1071.001
- n8n-nodes-api-finder@1.0.0 LWA-2026-6883T1195.002T1059.007T1082T1046T1071.001
- n8n-nodes-port-scanner@1.0.0 LWA-2026-6882T1195.002T1059.007T1082T1046T1016
- n8n-nodes-net-utils@1.0.0 LWA-2026-6881T1195.002T1059.007T1082T1046T1552.001
- n8n-nodes-utils-helper@1.0.0 LWA-2026-6880T1195.002T1059.007T1082T1087.002T1057
- n8n-nodes-task-runner@1.0.0 LWA-2026-6879T1195.002T1059T1082T1046T1057
- n8n-nodes-devops-utils@1.0.0 LWA-2026-6878T1195.002T1059.004T1059.006T1059.007T1071.001
- easyway2@1.0.0 LWA-2026-6877T1059.007T1082T1552.001T1041
- chai-as-inspired@2.2.4 LWA-2026-6876T1195.002T1059.007T1105T1071.001
- chai-as-promised-plus@6.1.3 LWA-2026-6875T1195.002T1059.007T1082T1071.001T1041
- sigchain-js@1.0.1 LWA-2026-6873
- habinger@2.1.6 LWA-2026-6872T1195.002T1059.007T1098.004T1082T1005
- chai-tracker@1.1.0 LWA-2026-6870T1195.002T1059.007T1105
- web3-terminal@2.1.6 LWA-2026-6867T1195.002T1059.007T1082T1552.001T1098.004
- isite@2026.7.2 LWA-2026-6866
- my-tailwind-gutenberg-block@0.1.2 LWA-2026-6865T1195.002T1059.007T1059.001T1105T1547.001
- chai-assertions-plus@6.0.4 LWA-2026-6864T1195.002T1059.007T1105T1071.001
- @across-toolkit/typescript-config@99.0.1 LWA-2026-6845
- @across-toolkit/eslint-config@99.0.0 LWA-2026-6847
- @across-toolkit/typescript-config@99.0.0 LWA-2026-6848
- mcp-dev-toolkit@1.5.0 LWA-2026-6854T1195.002T1059.007T1059T1547.001T1053.005
- time-format-kit@1.0.2 LWA-2026-6853T1195.002T1059.007T1059.004T1082T1552.001
- @bobfrankston/mlproc@1.0.11 LWA-2026-6855T1195.002
- application-util@2.1.6 LWA-2026-6852T1195.002T1059.007T1059T1082T1083
- date-utils-light@1.0.1 LWA-2026-6851T1195.002T1059.007T1082T1071.001T1041
- string-formatter-pro@1.0.0 LWA-2026-6850T1059.007T1059.004T1082T1552.005T1041
- http-req-lite@1.0.0 LWA-2026-6849T1195.002T1059.007T1105T1071.001T1041
- @across-toolkit/eslint-config@99.0.1 LWA-2026-6846T1195.002T1059.007T1082T1552.001T1552.004
- @hibachi-xyz/types@99.0.0 LWA-2026-6844T1195.002T1059.007T1082T1552.001T1071.001
- @hibachi-xyz/sdk@99.0.0 LWA-2026-6843T1195.002T1059.007T1082T1552.001T1041
- @hibachi-xyz/config@99.0.0 LWA-2026-6842T1195.002T1059.007T1082T1552.001T1041
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.