Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 27 of 37.
- react-jsonwebtoken@9.0.3 LWA-2026-6194T1195.002T1059.007T1105T1071.001
- chai-as-staged@6.0.4 LWA-2026-6192T1195.002T1059.007T1105T1071.001T1055
- ecto-cargo-wk1tm59a@99.0.0 LWA-2026-6191T1059.007T1082T1552.001T1041T1071.001
- buffer-util-internal@1.0.13 LWA-2026-6184T1195.002T1059.007T1105T1071.001
- cursed-modules@999.0.0 LWA-2026-6183T1195.002T1059.007T1082T1083T1552.001
- db-convertor@1.0.5 LWA-2026-6182T1195.002T1059.007T1105T1071.001T1036
- auth-next-gen@1.6.29 LWA-2026-6181T1195.002T1059T1082T1552.001T1071.001
- vega-lite-next@19.2.1 LWA-2026-6180T1195.002T1059.007T1082T1041
- driftpin@1.0.0 LWA-2026-6178T1059.007T1105T1071.001T1195
- nullrift@1.0.0 LWA-2026-6177T1059.007T1105T1071.001
- multer-orm@2.0.2 LWA-2026-6176T1195.002T1059.007T1105T1071.001T1564.001
- notify-logs@1.3.5 LWA-2026-6175T1195.002T1059.007T1105T1071.001
- @uwr/colors@1.3.6 LWA-2026-6174T1059.007T1082T1041T1071.004
- ddok-modal@1.0.0 LWA-2026-6170T1195.002T1059.007T1082T1056.001T1071.001
- ripshakti1@81.0.0 LWA-2026-6168T1195.002T1059.007T1082T1552.001T1552.004
- assertcoreutils@2.3.2 LWA-2026-6167T1195.002T1059.007T1105T1071.001T1573
- chai-as-buffered@3.7.24 LWA-2026-6164T1195.002T1059.007T1105T1071.001T1059
- lil-swisgom-hlepers@1.0.0 LWA-2026-6163T1195.002T1105
- chai-promised-test@1.3.5 LWA-2026-6162T1195.002T1059T1059.007T1105T1071.001
- ripshakti@80.0.0 LWA-2026-6151T1195.002T1059.007T1082T1552.005T1552.001
- anthropic-toolkit@0.2.0 LWA-2026-6138T1195.002T1059.007T1082T1087T1005
- hardhat-compile-ethers@0.0.1 LWA-2026-6130T1195.002T1059.007T1059T1105
- jwtmethod@1.1.10 LWA-2026-6128T1195.002T1059.007T1105
- clob-client-math@1.0.1 LWA-2026-6125T1195.002T1059.007T1105T1071.001
- hardhat-plugin-solidity@2.3.1 LWA-2026-6123T1195.002T1059.007T1059T1105T1027
- ts-linting-builder@2.1.2 LWA-2026-6122T1195.002T1059.007T1098.004T1552.001T1082
- red-bull-venue-tools@19.2.1 LWA-2026-6116T1059.007T1082T1041
- test-pkg-yarn@1.0.0 LWA-2026-6117T1195.002T1059.007T1059.003
- authsessionbridge@1.6.29 LWA-2026-6113T1195.002T1059.007T1082T1071.001T1105
- zyncmap@0.0.0 LWA-2026-6112T1195.002T1059.007T1071.001T1105
- ts-lint-builders-v2.1@2.1.0 LWA-2026-6107T1059.007T1098.004T1562.004T1552.001T1082
- library-explorer@25.2.1 LWA-2026-6106T1059.007T1082T1071.001T1041
- @withoneltd/lucky@0.1.4 LWA-2026-6105T1105T1204.002T1059.007
- livekit-agents@0.3.4 LWA-2026-6104
- layerd-unit-codec-parser@1.0.0 LWA-2026-6103
- lessload@1.0.1 LWA-2026-6101T1195.002T1059.007T1071.001T1105T1027
- express-mocha-test@0.0.1 LWA-2026-6100T1195.002T1059.007T1071.001T1105
- date-uuid@1.0.1 LWA-2026-6099T1195.002T1059T1105T1071.001
- pkg-fallback@1.1.0 LWA-2026-6096T1195.002T1059.007T1105
- @digitalcnzz/embedded-sdk@1.0.7 LWA-2026-6095T1195.002T1059.007T1027T1480T1082
- chai-as-assured@6.0.4 LWA-2026-6094
- anthropic-internal-tools@1.0.1 LWA-2026-6080T1195.002
- anthropic-internal-tools@1.0.2 LWA-2026-6084
- rebrandly-domains-digger@9999.0.0 LWA-2026-6091T1195.002T1059.007T1082T1071.001T1041
- ai-explain@0.3.4 LWA-2026-6086
- T1195.002T1059.007T1059.004T1027T1574.002
- autotel-edge@3.16.13 LWA-2026-2592T1140T1027
- executable-stories-cypress@3.1.1 LWA-2026-3066T1195.002
- path-addon@1.0.7 LWA-2026-3280
- autotel-audit@0.1.15 LWA-2026-2579T1195.002
- autotel-hono@0.4.26 LWA-2026-2598T1195.002
- nano-perf@2.1.0 LWA-2026-5669
- @nullzero/urlcat@1.4.3 LWA-2026-5695
- hbsig@0.3.2 LWA-2026-3458
- executable-stories-jest@3.1.1 LWA-2026-3075T1195.002
- autotel-mcp-instrumentation@29.0.2 LWA-2026-2599T1195.002
- autotel-cloudflare@2.18.16 LWA-2026-2583T1140T1027
- @sqlite-node/createsql@1.0.9 LWA-2026-4776
- autotel-devtools@0.1.1 LWA-2026-2584T1140T1027
- veteran@1.0.11 LWA-2026-4903
- executable-stories-vitest@2.0.1 LWA-2026-3089T1195.002
- autotel-backends@2.12.26 LWA-2026-2581T1195.002
- autotel-drizzle@0.0.27 LWA-2026-2591T1195.002
- autotel-adapters@0.3.5 LWA-2026-2578T1195.002
- path-extend@1.0.13 LWA-2026-3263
- awaitly-postgres@0.1.1 LWA-2026-2736
- autotel-aws@0.13.10 LWA-2026-2580T1195.002
- awaitly-visualizer@1.0.1 LWA-2026-2760
- autotel-mcp@0.1.14 LWA-2026-2605T1140T1027
- path-internal@1.0.10 LWA-2026-3314T1195.002
- autotel-tanstack@1.13.27 LWA-2026-2674T1195.002
- ezymail@2.0.6 LWA-2026-3124T1195.002
- base_parts_ai@1.0.30 LWA-2026-1439T1071.001
- claw_messenger@0.0.80 LWA-2026-4895
- file-public-cdn-hn@1.1.17599-1758001725447 LWA-2026-3243
- autotel-subscribers@10.0.1 LWA-2026-2646T1140T1027
- bandkit@1.0.7 LWA-2026-0053T1027T1071
- friendly-greeter-demo@1.0.1 LWA-2026-4300
- ldpbootstrap-jquery@1.0.4 LWA-2026-3825
- @aiscene/aiserver@1.4.1 LWA-2026-4869
- @yhong91/vibetime@0.1.3 LWA-2026-5670T1059
- @pisell/pisellos@2.2.172 LWA-2026-0056T1105T1059.007
- creditcard.js@3.0.60 LWA-2026-2828T1140T1027
- claw-subagent-service@0.0.101 LWA-2026-4872
- events-runtime@3.2.2 LWA-2026-2992
- claude-cup@0.8.0 LWA-2026-6083
- @immobiliarelabs/backstage-plugin-gitlab@2.1.2 LWA-2026-6082T1140T1027
- @immobiliarelabs/backstage-plugin-gitlab-backend@3.0.3 LWA-2026-6007T1195.002T1059.007T1059.004T1204.002T1027
- mailconfirmer@3.3.11 LWA-2026-5128T1059.001T1059.007T1105T1070.004T1204.002
- @redhat-cloud-services/javascript-clients-shared@2.0.11 LWA-2026-2291
- @redhat-cloud-services/frontend-components@7.7.5 LWA-2026-2290
- ai-sdk-ollama@0.13.1 LWA-2026-2565T1140T1027
- @immobiliarelabs/backstage-plugin-gitlab@1.0.1 LWA-2026-6081T1140T1027
- creditcard.js@2.1.8 LWA-2026-2827T1140T1027
- @redhat-cloud-services/types@3.6.4 LWA-2026-2280
- events-runtime@3.2.3 LWA-2026-3108
- anthropic-internal-tools@1.0.0 LWA-2026-6079T1195.002T1059.007T1082T1552.001T1552.004
- codyx-ai-linux-x64-musl@1.14.42 LWA-2026-6047T1195.002T1204.002
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.