Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 28 of 37.
- leo-aws@2.0.4 LWA-2026-6046T1195.002T1059.007T1027
- weavedb-sdk@0.45.3 LWA-2026-5470T1195.002T1059.007T1059
- friendly-greeter-demo@1.0.10 LWA-2026-6044T1195.002T1059.007T1059T1082T1071.001
- crossmint-wallets-sdk@1.0.0 LWA-2026-6037
- free-anthropic-claude@5.3.0 LWA-2026-6045T1195.002T1059.007T1059T1543.001T1574.002
- chai-as-persisted@6.1.9 LWA-2026-6036
- int_sezzle_sfra@25.2.1 LWA-2026-6039
- mailconfirmer@3.3.21 LWA-2026-6043T1059.007T1059.001T1564.003
- livekit-agents@0.3.0 LWA-2026-6042T1195.002T1082T1071.001T1041
- ts-ankle@1.1.0 LWA-2026-6041T1195.002T1059.007T1059T1098.004T1546
- @ranstech/baileys@6.1.0 LWA-2026-6040T1195.002T1105
- ryan-pdf-js@99.9.1 LWA-2026-6038T1195T1195.001
- zhuanhua@1.1.99 LWA-2026-6035T1195.002T1496
- chai-as-persisted@4.2.8 LWA-2026-6034T1195.002T1059.007T1071.001T1105
- react-dynammic-table-component@1.2.7 LWA-2026-6027T1195.002T1059.007T1105T1071.001
- react-dynamic-table-compenent@1.2.7 LWA-2026-6026T1195.002T1059.007T1105T1071.001
- gptmini@4.0.2 LWA-2026-6025T1195.002T1059T1218.005T1105
- chai-as-assured@7.1.2 LWA-2026-6020T1195T1059.007T1105T1071.001T1027
- rollup-plugin-polyfill-handler@1.0.0 LWA-2026-6018T1195.002T1059.007T1071.001T1105
- T1195.002T1059.007T1552.001T1552.004T1082
- ts-einkle-slot@0.0.8 LWA-2026-6017T1195.002T1059.007T1105
- T1195.002T1059.007T1059.004T1027T1574.002
- @immobiliarelabs/backstage-plugin-gitlab-backend@4.0.2 LWA-2026-6005T1195.002T1059.007T1059.004T1204.002T1027
- chai-as-synced@6.0.3 LWA-2026-5992
- @carvana.authentication-flows/shared@19.2.1 LWA-2026-6002
- express-plugin@1.6.6 LWA-2026-6004T1195.002T1059.007T1071.001T1105T1082
- dtxto1ols@1.0.2 LWA-2026-6000T1195.002T1059.004T1082T1071.001T1041
- ts-einkle@1.0.9 LWA-2026-5998T1195.002T1059.007T1098T1082T1083
- dtxtools@1.0.0 LWA-2026-5997T1059.007T1082T1041T1071.001
- dttfdsdee@1.0.1 LWA-2026-5993T1059.004T1082T1041T1071.001
- velocityfix@1.0.0 LWA-2026-5981T1195.002T1059.007T1105T1070.004
- @quantum-ai/gemini-cli@0.45.1 LWA-2026-5980T1195.002T1574.002T1059.007
- @salem_jalal/osc-components@1981.17.7 LWA-2026-5979T1195.002T1059.007T1082T1539T1071.001
- unsafe-malicious-package@1.0.0 LWA-2026-5982T1059.007T1552.001T1041T1071.001
- chai-as-built@6.0.3 LWA-2026-5974
- data-parser-utils@3.0.2 LWA-2026-5973T1059.007T1552.001T1082T1005T1041
- txs-builder@1.0.6 LWA-2026-5971T1059.007T1059.006T1105T1071.001T1027
- log-update-ts@0.1.0 LWA-2026-5972
- dttsdee@1.0.0 LWA-2026-5968T1195.002T1059.007T1082T1071.001T1041
- dddooo@1.0.0 LWA-2026-5967T1195.002T1059.004T1082T1041
- easy-string-kit232@1.0.8 LWA-2026-5966T1059.004T1082T1041T1071.001
- hexo-shoka-swiper@0.1.10 LWA-2026-5962T1195.002T1059.007T1027T1204.002
- hexo-deployer-wrangler@1.0.4 LWA-2026-5961T1195.002T1059.007T1027
- easy-string-kit@1.0.1 LWA-2026-5960T1195.002T1059.007T1082T1071.001T1041
- ref-slot@1.0.9 LWA-2026-5959T1195.002T1059.007T1082T1005T1552.001
- wp-codebox-workspace@9999.99.99 LWA-2026-5958T1195.002T1059.007T1082T1071.001T1071.004
- base58-core@1.0.1 LWA-2026-5956T1071.001
- base58-cli@1.0.0 LWA-2026-5955T1195.002T1059.007T1546.004T1547.001T1082
- leo-config@1.1.1 LWA-2026-5954T1195.002T1059T1027
- normalize-plus@3.6.6 LWA-2026-5953T1195.002T1059.007T1105T1071.001
- zenith-utils@12.0.14 LWA-2026-5952T1195.002T1059.007T1546T1027T1105
- zha@0.0.1-security.0 LWA-2026-5951
- react-campaign-optimizer@1.0.0 LWA-2026-5950T1195.002T1059.007T1059.004T1082T1087
- openllmapi@4.0.2 LWA-2026-5949T1195.002T1059.007T1059.003T1218.005T1105
- hardhat-test-log@1.1.0 LWA-2026-5948T1195.002T1059.007T1105T1071.001
- bug-monorepo@3.1.94 LWA-2026-5944T1059.007T1082T1041T1071.001
- theme-color-picker@2.0.28 LWA-2026-5943T1195.002T1059.007T1105T1027T1053.005
- ppt-creator@1.0.0 LWA-2026-5942T1059.007T1082T1041
- markdownlint-cli2-fix@99.0.6 LWA-2026-5940
- chai-as-operated@6.0.3 LWA-2026-5923T1195.002T1059.007T1059T1105
- ollama-helpers@0.2.1 LWA-2026-5892T1195T1059.007T1082T1041
- react-simple-utils-kit@1.0.1 LWA-2026-5875
- chalk-ultra@12.0.14 LWA-2026-5880
- react-simple-utils-kit@1.0.4 LWA-2026-5872
- date-format-helper2@1.0.4 LWA-2026-5867T1059.007T1552.005T1082T1071.001T1041
- airbnb-airlock@99.0.0 LWA-2026-5866T1195.002T1059.007T1105T1071.001
- block-slot@1.0.9 LWA-2026-5863T1195.002T1059.007T1098.004T1562.004T1552.001
- set-cookie-ease@1.1.5 LWA-2026-5862T1195.002T1059.007T1105
- kdrive-utils@99.9.9 LWA-2026-5857T1059.007T1082T1041
- analysis-chart@2.0.8 LWA-2026-5853T1195.002T1059.007T1055.001T1105
- pino-zod@1.0.121 LWA-2026-5852T1195.002T1059.007T1059T1547.001T1027
- paypal-postman-lib@1.0.2 LWA-2026-5849T1195.002
- web3-token-helper@1.1.3 LWA-2026-5848T1195.002T1059.007T1059T1105T1053.003
- zod-pino@1.0.122 LWA-2026-5847T1195.002T1059.007T1547.001T1552.001T1056.001
- shadxino@1.0.7 LWA-2026-5845T1195.002T1059.007T1059.001T1036.005T1564.003
- search-from-search@999.99.99 LWA-2026-5844T1195.002T1059.007T1082T1016T1552.001
- @dilxzphrine/baileys@1.0.0 LWA-2026-5843T1195.002T1059.007T1083T1496
- node-core-libs@1.0.0 LWA-2026-5840T1195.002T1059.007T1059.005T1071.001T1105
- tailwindcss-effector@1.7.0 LWA-2026-5838T1195.002T1059.007T1071.001T1102T1105
- hunsterx-package@7.0.1 LWA-2026-5837T1059.007T1082T1552.001T1552.005T1071.001
- crosswalker@18.2.1 LWA-2026-5836T1195.002T1059.007T1082T1071.001T1041
- assertcore@3.1.7 LWA-2026-5835
- crud-respect@999.99.99 LWA-2026-5834T1195.002T1059.007T1082T1552.001T1071.001
- chalk-ultra@12.0.3 LWA-2026-5826T1195.002T1059.007T1071.001T1105T1027
- respects-switch@999.0.0 LWA-2026-5833
- onboarding-respects-modal@999.99.99 LWA-2026-5832
- @lexborn/viem@2.53.2 LWA-2026-5831T1195.002T1059.007T1071.001
- search-from-feed@999.0.0 LWA-2026-5830T1059.007T1082T1071.001T1102T1048
- test-package-sajsdkashdj@2.1.6 LWA-2026-5828T1059.007T1105
- indexed-btree@2.1.2 LWA-2026-5825
- node-fetch-utils@1.2.1 LWA-2026-5824T1195.002T1059.007T1059.006T1027T1564.001
- hyperpure-core@1.0.0 LWA-2026-5821T1195.002T1059.004T1082T1552.001T1005
- zomato-config@1.0.0 LWA-2026-5819T1195.002T1059.004T1082T1005T1041
- zomato-sushi@1.0.0 LWA-2026-5820T1195.002T1059.004T1082T1071.001T1041
- blinkit-core@1.0.0 LWA-2026-5818T1195.002T1059.004T1059.007T1082T1552.001
- zomato-logger@1.0.0 LWA-2026-5817T1195.002T1059.004T1082T1552.001T1071.001
- hyperpure@1.0.0 LWA-2026-5816T1195.002T1059.004T1082T1552T1071.001
- zomato-espresso@1.0.0 LWA-2026-5815T1195.002T1059.004T1082T1552.001T1041
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.