Confirmed malicious npm packages
Every package version the probe has confirmed malicious and published, newest first. 2,833 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. Page 28 of 29.
- chai-utils-test@4.5.1 LWA-2026-2800T1620
- chai-utils-test@4.5.0 LWA-2026-2799T1620
- chai-utils-test@4.5.3 LWA-2026-2802T1059
- autotel-mongoose@2.0.5 LWA-2026-2636T1140T1027
- autotel-mongoose@3.0.1 LWA-2026-2637T1140T1027
- autotel-mongoose@6.0.1 LWA-2026-2640T1140T1027
- autotel-mongoose@4.0.1 LWA-2026-2638T1140T1027
- autotel-mongoose@5.0.2 LWA-2026-2639T1140T1027
- autotel-mongoose@1.0.2 LWA-2026-2635T1140T1027
- autotel-mcp@3.0.1 LWA-2026-2627T1140T1027
- autotel-mcp@5.0.1 LWA-2026-2629T1140T1027
- autotel-mcp@8.0.1 LWA-2026-2632T1140T1027
- autotel-mcp@6.0.1 LWA-2026-2630T1140T1027
- autotel-mcp@9.0.1 LWA-2026-2633T1140T1027
- autotel-mcp@7.0.1 LWA-2026-2631T1140T1027
- autotel-mcp@4.0.1 LWA-2026-2628T1140T1027
- autotel-mcp@24.0.1 LWA-2026-2620T1140T1027
- autotel-mcp@25.0.1 LWA-2026-2621T1140T1027
- autotel-mcp@27.0.1 LWA-2026-2624T1140T1027
- autotel-mcp@26.0.2 LWA-2026-2622T1140T1027
- autotel-mcp@28.0.3 LWA-2026-2625T1140T1027
- autotel-mcp@29.0.1 LWA-2026-2626T1140T1027
- autotel-mongoose@0.0.3 LWA-2026-2634T1195.002
- ai-sdk-helpers@1.2.0 LWA-2026-2558T1059T1546.016
- ai-sdk-helpers@1.3.1 LWA-2026-2561T1195.002
- ai-sdk-helpers@1.4.2 LWA-2026-2564T1059T1546.016
- ai-sdk-helpers@0.1.0 LWA-2026-2543T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.1.1 LWA-2026-2544T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.1.2 LWA-2026-2545T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.2.0 LWA-2026-2546T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.2.1 LWA-2026-2547T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.3.0 LWA-2026-2548T1059T1546.016
- ai-sdk-helpers@0.3.1 LWA-2026-2549T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.4.0 LWA-2026-2551T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.4.1 LWA-2026-2552T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.1.0 LWA-2026-2556T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.1.1 LWA-2026-2557
- ai-sdk-helpers@1.2.1 LWA-2026-2559
- ai-sdk-helpers@1.3.0 LWA-2026-2560
- ai-sdk-helpers@1.4.0 LWA-2026-2562
- ai-sdk-helpers@1.4.1 LWA-2026-2563
- ai-sdk-helpers@0.3.2 LWA-2026-2550T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.5.0 LWA-2026-2553T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.0.0 LWA-2026-2554T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.0.1 LWA-2026-2555T1195.002T1059T1546.016T1082T1552.001
- sensivity@2.5.39 LWA-2026-2445T1027T1140T1059T1564
- sensivity@2.5.38 LWA-2026-2444T1027
- chai-chain-test@1.3.5 LWA-2026-2439T1140T1027
- electron-device-id@1.0.3 LWA-2026-2433T1140T1027
- sensivity@2.5.25 LWA-2026-2411T1027
- sensivity@2.5.24 LWA-2026-2410T1140T1027
- sensivity@2.5.23 LWA-2026-2409T1140T1027
- sensivity@2.5.22 LWA-2026-2408T1059
- dt-fe-t2d-marketplace@71.0.2 LWA-2026-2403T1059T1546.016
- dotenv-pack@2.3.7 LWA-2026-2358T1620
- dotenv-pack@2.3.5 LWA-2026-2357T1059
- dotenv-pack@2.3.10 LWA-2026-2356T1620
- chai-as-init@1.4.6 LWA-2026-2355T1620
- @keeneye/uikit@5.0.1 LWA-2026-2338T1027
- @keeneye/toolkit@5.0.1 LWA-2026-2339T1027
- @gbrlxvi/ts-form-utils@2.1.1 LWA-2026-2334T1140T1027
- sensivity@2.5.7 LWA-2026-2315T1027
- o3forms@99.1.99 LWA-2026-2316T1195.002
- sensivity@2.5.5 LWA-2026-2276T1027
- sensivity@2.5.3 LWA-2026-2270T1140T1027
- sensivity@2.5.2 LWA-2026-2269T1140T1027
- sensivity@2.5.0 LWA-2026-2268T1140T1027
- argoncrypt@1.2.3 LWA-2026-2271T1140T1027
- chai-as-patched@7.0.6 LWA-2026-2267T1140T1027
- @redhat-cloud-services/hcc-pf-mcp@0.6.1 LWA-2026-2173
- @redhat-cloud-services/hcc-kessel-mcp@0.3.1 LWA-2026-2171T1140T1027
- @catamania/front-components@1.0.2 LWA-2026-2164T1059T1546.016
- jingmeideshishi@1.0.7 LWA-2026-2153
- masterkrweb@9.9.9 LWA-2026-2005T1071.001
- apache-httpclient7@1.0.0 LWA-2026-1318
- apache-httpclient6@1.0.0 LWA-2026-1317
- apache-httpclient5@1.0.0 LWA-2026-1316
- apache-httpclient4@1.0.0 LWA-2026-1315
- apache-httpclient3@1.0.0 LWA-2026-1314
- apache-httpclient2@1.0.0 LWA-2026-1313
- apache-httpclient1@1.0.0 LWA-2026-1312
- lsp-mcp@0.0.4 LWA-2026-1309
- amplitude-ma-ts@1.0.24 LWA-2026-1297
- amplitude-ma-ts@1.0.22 LWA-2026-1296
- @gbrlxvi/ts-form-utils@2.0.0 LWA-2026-1290
- alya-baileys@1.8.42 LWA-2026-1278
- alya-baileys@1.8.41 LWA-2026-1277
- alya-baileys@1.8.40 LWA-2026-1276
- alya-baileys@1.8.39 LWA-2026-1275
- alya-baileys@1.8.36 LWA-2026-1274
- alya-baileys@1.8.35 LWA-2026-1272
- alice-baileys@2.0.3 LWA-2026-1270
- alice-baileys@2.0.2 LWA-2026-1269
- alice-baileys@2.0.1 LWA-2026-1268
- alice-baileys@2.0.0 LWA-2026-1267
- aixj-cli@1.0.1 LWA-2026-1252
- @veertly/web-app@100.0.2 LWA-2026-1098T1195.002
- @veygo/component-library@99.9.2 LWA-2026-1112T1195.002
- @visma-net-platform/module-navigator@99.9.1 LWA-2026-1116T1195.002
- @visonum/network-quality-sdk@99.9.9 LWA-2026-1117T1195.002
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.