Confirmed malicious npm packages
Every package version the probe has confirmed malicious and published, newest first. 2,833 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. Page 25 of 29.
- codyx-ai-darwin-x64-baseline@1.14.42 LWA-2026-5159T1195.002T1027
- codyx-ai@1.14.42 LWA-2026-5155T1059T1059.007T1204
- codyx-ai-linux-x64-baseline-musl@1.14.42 LWA-2026-5161T1195.002
- codyx-ai-linux-x64@1.14.42 LWA-2026-5162T1195.002
- codyx-ai-linux-x64-baseline@1.14.42 LWA-2026-5157T1195.002
- simple-auth-basic@2.0.2 LWA-2026-5150T1195.002T1059.007T1105T1071.001
- signature-transaction@1.1.0 LWA-2026-5149T1195.002T1059.007T1552.004T1071.001T1041
- sickle-wrapper@0.2.0 LWA-2026-5148T1059.007T1552.001T1552.004T1082T1005
- shadcn-ui-autocomplete@3.5.0 LWA-2026-5147T1059.007T1555.003T1082T1041T1071.001
- environment-gate@7.3.6 LWA-2026-5146T1059.007T1105
- sftc-advance-components@0.9.9 LWA-2026-5136T1195.002T1059.007T1082T1071.004T1041
- session-exp@1.3.20 LWA-2026-5131T1195.002T1059.007T1071.001T1105
- mailconfirmer@3.3.12 LWA-2026-5127T1059.001T1059.007T1105T1070.004T1204.002
- server-up-ndot@1.0.0 LWA-2026-5100T1059.004T1105
- sentrykit@30.0.0 LWA-2026-5099T1195.002T1105
- self-v8@8.3.9 LWA-2026-5095T1552.001T1119T1041
- seek-pass@100.10.0 LWA-2026-5091
- seek-pass@100.6.0 LWA-2026-5094
- seek-pass@100.3.0 LWA-2026-5093
- seek-pass@100.0.0 LWA-2026-5090
- seed-to-private@1.0.1 LWA-2026-5089T1195.002T1059.007T1543.002T1053.005T1027
- search-reservation@55.0.0 LWA-2026-5088T1195.002T1105
- scraping-master@0.1.11 LWA-2026-5081T1027
- scraping-master@0.1.10 LWA-2026-5080T1027
- scraping-master@0.1.9 LWA-2026-5087T1027
- scraping-master@0.1.8 LWA-2026-5086T1027
- scraping-master@0.1.7 LWA-2026-5085
- scraping-master@0.1.6 LWA-2026-5084T1027
- scraping-master@0.1.5 LWA-2026-5083
- scraping-master@0.1.4 LWA-2026-5082T1027
- scoin_setting@1.0.18 LWA-2026-5076T1552.001T1071.001T1041
- rollup-runtime-polyfill-core@0.13.5 LWA-2026-5048T1195.002T1059.007T1105T1027
- rollup-packages-polyfill-core@0.5.0 LWA-2026-5038T1195.002T1059T1059.007T1105T1074.001
- saps_secplayground_npm_ai@1.0.5 LWA-2026-5073
- saps_secplayground_npm_ai@1.0.4 LWA-2026-5072T1059.007T1552.001T1567
- saps_secplayground_npm_ai@1.0.3 LWA-2026-5071
- saps_secplayground_npm_ai@1.0.2 LWA-2026-5070
- saps_secplayground_npm_ai@1.0.1 LWA-2026-5069
- saps_secplayground_npm_ai@1.0.0 LWA-2026-5068
- rtms-manager@1.2.0 LWA-2026-5051T1195.002T1059.004T1552.004T1071.001T1041
- rtms-manager-dev@1.3.0 LWA-2026-5052T1195.002T1059.004T1552.004T1071.001T1041
- rtms-manager@1.0.0 LWA-2026-5050T1059.007T1082T1071.004
- @giftyhq/widget-components@19.12.11 LWA-2026-5040T1059.007T1082T1071.001T1041
- rollup-plugin-polyfill-connect@1.0.1 LWA-2026-5039T1195.002T1059.007T1071.001T1105
- riot-private@100.0.0 LWA-2026-5026T1195.002T1059.007T1082T1041
- ring-device-settings-library@45.0.0 LWA-2026-5025T1195.002T1105
- rimo-env-validator@1.0.1 LWA-2026-5023T1059.007T1082T1552.001T1071.001T1041
- houzidawang808@1.0.0 LWA-2026-5016T1195.002T1059T1082T1041T1071.001
- houzidawang807@1.1.6 LWA-2026-5015T1552.001T1082T1041T1071.001T1059.007
- reseller-app@9.9.11 LWA-2026-5010T1059.007T1082T1071.004T1041
- request-logger-canary@1.0.0 LWA-2026-5009T1195.002T1059.007T1059.004T1095
- request-js-validator@1.0.4 LWA-2026-5006
- request-js-validator@1.0.3 LWA-2026-5005
- request-js-validator@1.0.2 LWA-2026-5004T1195.002T1059.007T1071.001T1105
- sheratan_haha@1.0.0 LWA-2026-4997T1059.007T1082T1071.001T1041T1195.002
- renovate-config-doctolib@9.9.16 LWA-2026-5000T1195.002T1059.007T1082T1083T1552.001
- rendezvous-js@9.9.11 LWA-2026-4998T1059.007T1082T1071.004
- redux-init-rce@1.0.0 LWA-2026-4983T1195.002T1059.007T1082T1041
- redux-probe-unknown-action-rce@1.0.0 LWA-2026-4984T1059.004T1082T1041T1195.002
- houzidawang806@1.0.1 LWA-2026-4981T1195.002T1059.004T1082T1552.004T1071.001
- macos-ci-utils@1.0.1 LWA-2026-4978T1195.002T1059.007T1105T1140T1564.001
- redirect-azlazy@1.0.0 LWA-2026-4969T1195T1105
- @ci-lifecycle-test/postinstall-ping@1.0.0 LWA-2026-4968T1059.007T1552.004T1082T1071.001T1041
- redeem-onchain-sdk@1.0.1 LWA-2026-4962T1195.002T1059T1082T1552.001T1071.001
- react-svg-chunk@1.1.0 LWA-2026-4957T1195.002T1059.007T1071.001T1105T1082
- react-schedule-it@4.0.0 LWA-2026-4955T1195.002T1105
- react-remove-properties@6.14.0 LWA-2026-4951
- react-next-dom@1.1.7 LWA-2026-4947T1140T1027
- react-native-wcandillon@4.1.0 LWA-2026-4946T1195.002
- react-native-international-phone-number@0.12.3 LWA-2026-4944T1195.002
- react-native-international-phone-number@0.12.2 LWA-2026-4943
- react-native-international-phone-number@0.12.1 LWA-2026-4942T1195.002T1059.007
- warp-dependency@1.0.0 LWA-2026-4934T1195.002T1059.007T1105T1204.002T1059
- @wacrot/infra-data-kit@2.1.4 LWA-2026-4933T1059.004T1059.007T1105T1546.004
- react-emits@1.0.5 LWA-2026-4927T1195.002T1059.007T1105T1071.001
- react-copy-lite@1.0.1 LWA-2026-4909T1059T1546.016
- rc-icon@99.9.1 LWA-2026-4850T1195.002
- theta-connector@1.0.0 LWA-2026-4847T1195.002T1059.007T1105T1071.001
- chalk-pro@7.0.4 LWA-2026-4848T1195.002T1059.007T1059T1105T1071.001
- richtext-editor-ui@1.0.0 LWA-2026-4846T1195.002T1059.007T1105T1071.001
- rapidsearch@1.1.0 LWA-2026-4842T1195.002T1059.007T1071.001T1105T1102
- eslint-plugin-mistica-local-rules@19.12.11 LWA-2026-4834T1195.002T1059.007T1082T1071.001T1041
- qr-code-styling-temp@9.9.10 LWA-2026-4820T1195.002T1059.007T1082T1071.004T1041
- atlassian-forge-skills@29.1.0 LWA-2026-4815T1195.002T1059.007T1082T1071.004T1041
- qbo-ui-services@45.0.0 LWA-2026-4819T1195.002T1105
- pwdyx@1.0.9 LWA-2026-4811T1195.002T1059.007T1485
- pumpdotfun-sdk-v3.0@3.1.3 LWA-2026-4801T1552.004T1041T1071.001T1059.007
- pt-logger-telemetry-eax0x1@1.0.0 LWA-2026-4796T1059.007T1552.001T1082T1071.001T1041
- theta-kit@1.0.0 LWA-2026-4779T1195.002T1059.007T1105
- protectstraizolib@1.0.8 LWA-2026-4781T1059.007T1102T1082T1041T1573.001
- program-commander@14.1.9 LWA-2026-4775T1195.002T1059.007T1071.001T1552.004T1041
- prm-bundles@45.0.0 LWA-2026-4762T1195.002T1059.007T1105
- prisma-callback@1.0.0 LWA-2026-4754T1195.002T1059T1059.004T1071.001T1572
- pretty-pino-logger@2.0.2 LWA-2026-4753T1059.007T1098.004T1082T1005T1552.001
- pretty-fancy@1.0.1 LWA-2026-4744T1195.002T1059.007T1082T1005T1071.001
- prettlog@1.0.10 LWA-2026-4713T1195.002T1059.007T1552.001T1082T1005
- prettier-logger@0.1.4 LWA-2026-4697T1195.002T1059.007T1082T1098.004T1005
- prettier-lint-lenz@2.6.4 LWA-2026-4696T1195.002T1059.007T1059.001T1053.005T1564.003
- poxios-chain@1.3.5 LWA-2026-4685T1059T1059.007T1105T1071.001T1055
- sea-bound-siren@99.0.1 LWA-2026-4681
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.