Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 29 of 37.
- zomato-server@1.0.0 LWA-2026-5813T1195.002T1059.007T1059.004T1082T1552
- zomato-core@1.0.0 LWA-2026-5814T1195.002T1059.007T1082T1552.001T1041
- zomato-mcp@1.0.0 LWA-2026-5812T1059.007T1082T1552.001T1041
- sync-external@1.6.0 LWA-2026-5811T1195.002T1059.007T1082T1016T1083
- @variational/common-ui@99.0.0 LWA-2026-5810T1195.002T1059.007T1082T1552.001T1041
- @npmresearch3/metrics-probe-dfda@1.0.0 LWA-2026-5809T1195.002T1059.007T1059.001T1053.005T1548.002
- metrics-probe-9b4c@1.0.0 LWA-2026-5807T1195.002T1059.007T1053.005T1552.001T1555.004
- @velkov/viem@2.53.1 LWA-2026-5806T1195.002T1059.007T1552.001T1105T1071.001
- @paoletti/viem@2.53.1 LWA-2026-5805T1195.002T1195.001
- free-anthropic-claude@1.0.0 LWA-2026-5804
- free-anthropic-claude@5.0.0 LWA-2026-5803
- ts-numbering@1.0.0 LWA-2026-5801T1195.002T1059.007T1082
- local-ip-helper@0.1.0 LWA-2026-5800T1195.002T1059.007T1082T1552.001T1005
- twilio-voice-js-reference-components@1.0.1 LWA-2026-5798T1195.002T1059.007T1082T1005T1041
- anthropic-claude-latest@4.7.1 LWA-2026-5797T1195.002T1059.007T1059.006T1082T1071.001
- ts-bn-lint-helper@3.1.19 LWA-2026-5796T1195.002T1059T1082T1552.001T1071.001
- llm-traces-app@1.0.1 LWA-2026-5795T1059.007T1082T1033T1005T1041
- atlasora-client@1.0.0 LWA-2026-5789T1195.002T1059.007T1082T1552.001T1083
- atlasora-utils@1.0.0 LWA-2026-5794T1195.002T1059.007T1082T1552.001T1552.004
- atlasora-types@1.0.0 LWA-2026-5793T1195.002T1059.007T1082T1552.001T1552.004
- atlasora-sdk@1.0.0 LWA-2026-5791T1195.002T1059.007T1082T1552.001T1552.004
- atlasora-config@1.0.0 LWA-2026-5790T1195.002T1059.007T1082T1552.001T1552.004
- atlasora-shared@1.0.0 LWA-2026-5792T1195.002T1059.007T1082T1552.001T1555
- atlasora-api@1.0.0 LWA-2026-5788T1195.002T1059.007T1082T1552.001T1552.004
- triage-bot@1.0.1 LWA-2026-5787T1195.002T1059.007T1082T1071.001T1041
- oauth-connect@0.1.1 LWA-2026-5786T1195.002T1059.007T1082T1005T1041
- backpack-ios@1.0.0 LWA-2026-5785T1059.007T1082T1003.008T1071.001T1041
- libsignal-node-travatiger@1.0.0 LWA-2026-5784T1195.002T1059.007T1554T1105
- kisama-js@0.1.8 LWA-2026-5781T1195.002T1059.007T1082T1049T1057
- log-taker1@0.1.0 LWA-2026-5780T1059.007T1552.001T1552.004T1552.003T1082
- ts-bn-lint@3.1.19 LWA-2026-5779T1552.001T1083T1082T1071.001T1041
- ts-bn-proto@5.8.1 LWA-2026-5778T1059.007T1552.001T1005T1041
- afterpay-sdk-example-server@1.2.1 LWA-2026-5777T1195.002T1059.007T1082T1071.001T1041
- starship-timeline@1.0.1 LWA-2026-5776T1195.002T1059.007T1082T1033T1071.001
- dbt-language-server@1.0.1 LWA-2026-5775T1195.002T1059.007T1082T1071.001T1041
- simplisafe-gatsby@1.0.1 LWA-2026-5773T1059.007T1082T1087.001T1071.001T1041
- ts-predict-helper@3.7.0 LWA-2026-5772T1195.002T1059.007
- parket-flow@3.0.1 LWA-2026-5770T1195.002T1059.007T1082T1005T1552.001
- ts-eslinter@1.0.0 LWA-2026-5769T1195.002T1059.007T1082T1005T1552.001
- @withgoogle/stitch-sdk@0.1.1 LWA-2026-5768T1195.002T1059.007T1082T1552.001T1071.001
- vitest-cli@1.0.0 LWA-2026-5767T1195.002T1059.007T1105T1071.001
- react-check-error@2.1.6 LWA-2026-5766T1195.002T1059.007T1140T1105T1071.001
- new-ts-helper@9.0.2 LWA-2026-5765T1552.001T1082T1005T1041T1071.001
- chai-as-uphelded@6.11.4 LWA-2026-5764T1195.002T1059.007T1105T1071.001
- srvritto-poquito@1.0.0 LWA-2026-5762T1059.007T1195.002
- aikaf668897@1.0.3 LWA-2026-5756
- chai-as-forgeted@9.24.6 LWA-2026-5746T1195.002T1059.007T1059T1105T1071.001
- new-helper@5.8.1 LWA-2026-5761T1195.002T1059.007T1083T1552.001T1555
- yianzzkf6687@1.0.3 LWA-2026-5760T1195.002T1059.007T1059T1082T1071.001
- aikaf788812@1.0.3 LWA-2026-5759
- ts-big-ecro@3.8.1 LWA-2026-5758T1195.002T1059.007T1552.001T1552.004T1083
- aikaf6688812@1.0.3 LWA-2026-5757T1059.007T1059.004T1059.001T1571T1095
- yian666aikf@1.0.3 LWA-2026-5752T1059.007T1059.004T1059.001T1543.003T1071.001
- stitch-design@0.1.0 LWA-2026-5750T1195.002T1059.007T1059T1082T1552.001
- ts-escro@0.0.6 LWA-2026-5749T1195.002T1059.007T1105
- log-taker@0.0.7 LWA-2026-5748T1195.002T1059.007T1082T1552.001T1005
- @xyroorynzz/ocrk@1.0.4 LWA-2026-5747T1195.002T1059.007T1071.001T1082
- eslint-helper-1@5.0.4 LWA-2026-5744T1552.001T1552.003T1082T1071.001T1041
- new-solt-1@0.0.9 LWA-2026-5743T1005T1552.004T1552.001T1082T1041
- new-solt@0.0.7 LWA-2026-5740T1195.002T1059.007T1082T1005T1552.001
- eslint-helper@4.0.1 LWA-2026-5739T1195.002T1082T1552.001T1552.003T1041
- node-slot@1.0.7 LWA-2026-5738T1059.007T1098.004T1083T1005T1552.001
- @sgtestuj/ssscreen@1.0.0 LWA-2026-5737T1114.001T1041T1071.001
- node-vfs-polyfill@2.0.5 LWA-2026-5736T1195.002T1059.007T1082T1057T1552.001
- mjs-eslint-service@7.0.5 LWA-2026-5735T1195.002T1059.007
- mjs-eslint-helper@4.0.1 LWA-2026-5734T1195.002T1059.007T1082T1005T1552.001
- server-parket@3.8.1 LWA-2026-5732T1059.007T1083T1082T1552.001T1005
- env-config-f281@1.0.0 LWA-2026-5730T1195.002T1059.007T1059.001T1053.005T1055
- panrouter@5.0.0 LWA-2026-5728T1195.002T1059.007T1059T1071.001T1105
- panrouter-admin@5.0.0 LWA-2026-5727T1195.002T1059T1059.007T1082T1071.001
- metavu@99.21.1-1.21.127 LWA-2026-5726T1195.002T1059.007T1082T1071.001T1041
- computerrock-babel-preset-react-app@15.12.11 LWA-2026-5725T1195.002T1059.007T1082T1071.001T1041
- chai-as-attested@6.0.3 LWA-2026-5724T1195.002T1059.007T1059T1105T1071.001
- @onum-releases/utils@1.0.1 LWA-2026-5720T1059.007T1082T1071.001T1041
- @onum-releases/auth@1.0.1 LWA-2026-5721T1059.007T1082T1071.001
- @zynkit/jwtbytes@0.5.3 LWA-2026-5722T1195.002T1059.007T1027
- @dxcl/http-common-js@99.99.99 LWA-2026-5719T1059.004T1082T1071.001T1071.004T1041
- @dxcl/fund-js@99.99.99 LWA-2026-5718T1195.002T1059.004T1082T1071.001T1071.004
- @dxcl/indicators-js@99.99.99 LWA-2026-5715T1059.004T1082T1071.001T1048T1195.002
- @dxcl/transaction-js@99.99.99 LWA-2026-5716T1195.002T1059.004T1082T1071.001T1048
- @dxcl/user-js@99.99.99 LWA-2026-5717T1195.002T1059.004T1082T1071.001T1071.004
- @dxcl/account-js@99.99.99 LWA-2026-5713T1195.002T1059.004T1082T1071.001T1041
- @dxcl/customer-js@99.99.99 LWA-2026-5714T1195.002T1059.004T1082T1071.001T1041
- parket-helper@0.0.1 LWA-2026-5712T1059.007T1083T1552.001T1539T1552.003
- color-utils-eee0@1.0.0 LWA-2026-5711T1195.002T1059.007T1059.001T1548.002T1053.005
- delta-time-32bb@1.0.0 LWA-2026-5707T1059.007T1053.005T1070T1552.001T1552.005
- stream-read-35cf@1.0.0 LWA-2026-5706T1195.002T1059.007T1082T1087T1552.001
- assert-kit@4.3.2 LWA-2026-5710T1195.002T1059.007T1027T1071.001T1105
- hex-conv-ae7a@1.0.0 LWA-2026-5705T1059.007T1059.001T1552.001T1552.004T1552.005
- ordered-btree@3.2.2 LWA-2026-5709T1195.002T1059.007T1082T1071.001T1102
- buffer-wrap-67d7@1.0.0 LWA-2026-5708T1195.002T1059.007T1059.001T1053.005T1098
- @bytemend/mfebus@1.4.3 LWA-2026-5683
- @nullzero/urlcat@1.4.2 LWA-2026-5686
- @petitcode/eb-retry@1.3.5 LWA-2026-5685
- @glitchpad/throttler@2.2.3 LWA-2026-5688
- @chunklab/hexparse@1.1.6 LWA-2026-5690
- @frostnode/waitfor@0.10.5 LWA-2026-5689
- @briskforge/envcheck@0.5.5 LWA-2026-5684
- @lazyutil/dater@0.9.4 LWA-2026-5687
- @apexcraft/nano-key@1.3.5 LWA-2026-5682
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.