Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 30 of 37.
- chai-assert-kit@3.8.1 LWA-2026-5681T1027T1140
- @tinyfox/shapecheck@0.8.7 LWA-2026-5691T1027
- safe-json-38bd@1.0.0 LWA-2026-5680
- classbreeze-utils@0.7.9 LWA-2026-5679T1195.002
- datacamp-light@1.0.0 LWA-2026-5678
- data-utils-bcf2@1.0.0 LWA-2026-5677T1098.004
- fmt-helpers-794b@1.0.0 LWA-2026-5674
- oem-agentic-shared@99.9.1 LWA-2026-5676T1195.002T1105
- @yhong91/vibetime@0.1.0 LWA-2026-5668T1059
- @schemats/json-schema-to-typescript@15.0.4 LWA-2026-5665
- nano-perf@2.2.0 LWA-2026-5666
- @thales-dis-dr/drmcl-ts-shared@99.99.99 LWA-2026-5667
- opt-archetype-check@9.9.0 LWA-2026-6477T1195.002
- @muaththir/api@2.0.0 LWA-2026-5658T1195.002
- relative-time-live@0.1.0 LWA-2026-5653T1195.002
- scan-only@0.3.0 LWA-2026-5649T1195.002
- lab-services@99.0.0 LWA-2026-5648
- runtimedev-link@1.0.0 LWA-2026-5647T1016.001
- @civitatis/bot-ui@15.12.11 LWA-2026-5660
- @azure-lab-services/ml-ts@99.0.0 LWA-2026-5646
- @public-for-cdao/providers@1.0.1 LWA-2026-5644T1059T1546.016
- ebpf-tracker-action@1.0.1 LWA-2026-5645
- set-proto-chain@1.0.3 LWA-2026-5643T1059
- db-connector-log@1.0.0 LWA-2026-5642
- @ravespaceio/rave-engine@99.0.1 LWA-2026-5639
- @ravespaceio/browser-input@99.0.1 LWA-2026-5638T1059T1546.016
- the_tax_free_cashier_is_at_9f@1995.3.20 LWA-2026-6173T1140T1027
- metrics-probe-88ad@1.0.0 LWA-2026-5637
- metrics-probe-dc85@1.0.0 LWA-2026-5636
- easy-day-js@1.11.22 LWA-2026-5633
- @public-for-cdao/api@99.99.99 LWA-2026-5630T1195.002
- @public-for-cdao/signer@99.99.99 LWA-2026-5631T1195.002
- @public-for-cdao/types@99.99.99 LWA-2026-5632T1195.002
- @public-for-cdao/contracts@99.99.99 LWA-2026-5625
- @public-for-cdao/config@99.99.99 LWA-2026-5624
- @public-for-cdao/token@99.99.99 LWA-2026-5629
- @public-for-cdao/deploy@99.99.99 LWA-2026-5626
- @public-for-cdao/bot@99.99.99 LWA-2026-5622
- @public-for-cdao/backend@99.99.99 LWA-2026-5621T1195.002
- @public-for-cdao/sdk@99.99.99 LWA-2026-5628
- @public-for-cdao/common@99.99.99 LWA-2026-5623T1195.002
- @public-for-cdao/hooks@99.99.99 LWA-2026-5627T1195.002
- @public-for-cdao/utils@99.99.99 LWA-2026-5620T1195.002
- @public-for-cdao/core@99.99.99 LWA-2026-5619T1195.002
- @public-for-cdao/abi@99.99.99 LWA-2026-5618T1195.002
- cryptodao-contracts@99.99.99 LWA-2026-5614
- cryptodao-signer@99.99.99 LWA-2026-5613
- cryptodao-utils@99.99.99 LWA-2026-5616
- cryptodao-deploy@99.99.99 LWA-2026-5609
- cryptodao-types@99.99.99 LWA-2026-5612
- cryptodao-core@99.99.99 LWA-2026-5611
- cryptodao-bot@99.99.99 LWA-2026-5608
- cryptodao-config@99.99.99 LWA-2026-5617
- cryptodao-sdk@99.99.99 LWA-2026-5610T1195.002
- cryptodao-backend@99.99.99 LWA-2026-5615
- @mastra/node-speaker@0.1.1 LWA-2026-5635T1195.002
- envfile-sync-cli@1.0.2 LWA-2026-5640T1620
- create-mastra@1.13.1 LWA-2026-5634
- harpoon-package@1.1.0 LWA-2026-5601T1195.002
- backoffice-charges-module@1.999.0 LWA-2026-5605T1195.002
- nottuff7@1.7.7 LWA-2026-5599T1027
- nottuff15@1.7.7 LWA-2026-5598T1027
- package-uploader@1.3.25 LWA-2026-5591
- procwire@1.3.0 LWA-2026-5590
- chai-test-mocks@1.2.0 LWA-2026-5589T1195.002
- aillmgen@4.0.2 LWA-2026-5588T1195.002
- caspian-day-js@1.11.23 LWA-2026-5582
- tronweb-crypto@6.3.1 LWA-2026-5578T1027
- unique-new-york-standard-wallet@1.0.4 LWA-2026-5579
- @dsft/ft-utils@1.5.8 LWA-2026-5584
- weavedb-offchain@0.45.4 LWA-2026-5580
- @dsft/ft-element@2.5.9 LWA-2026-5583
- wm-pause-lib-after-storage@1.0.0 LWA-2026-5581T1071.001
- mci-sdk@1.2.8 LWA-2026-5592T1059
- react-hook-use-debounce-throttle-12@1.0.0 LWA-2026-5575
- chai-plugin-kit@5.8.1 LWA-2026-5566T1195.002T1059.007T1027T1071.001T1105
- proto-bin@2.3.3 LWA-2026-5565T1105T1059.007T1204.002
- easyllmai@3.0.1 LWA-2026-5563T1195.002T1059.007T1059.003T1218.005T1105
- ssr-auth-sync@1.6.16 LWA-2026-5562T1195.002T1059.007T1082T1071.001T1105
- zgmiai-claude-code@1.0.56 LWA-2026-5553T1195.002T1059.007T1552.001T1071.001T1041
- zetrix-development-utils@1.0.2 LWA-2026-5552T1195.002T1059.007T1082T1552.001T1071.001
- chai-plugin-helper@1.7.3 LWA-2026-5551T1195.002T1059T1059.007T1071.001T1105
- nat-ulid@3.0.2 LWA-2026-5550T1195.002T1059.007T1543.002T1547.001T1053.005
- your-unique-package-name1@1.0.0 LWA-2026-5549T1195.002T1059.007T1530T1567
- yoshino_s_test_evil@1.0.0 LWA-2026-5548T1059.007T1071
- yellow-discord-lookup-v1@1.0.3 LWA-2026-5547T1059.007T1027T1071.001
- xz-c-d@1.5.3 LWA-2026-5540T1082T1071.001T1041
- @caspianph/storyteller@1.1.13 LWA-2026-5536T1195.002T1059.007T1071.001T1105T1564.001
- xrpl-ts@1.0.2 LWA-2026-5535T1071.001
- xpna-context@1.0.2 LWA-2026-5534T1195.002T1059.004T1059.007T1082T1041
- xmr-btc-lib-js@1.2.1 LWA-2026-5531T1041T1071.001T1552.004T1059
- uidai_reusable_components@0.4.2 LWA-2026-5528T1195.002T1059.007T1082T1041
- xeiko-cdn@1.0.0 LWA-2026-5527T1195.002T1562.001T1071.001T1105T1496
- xboxauthwrapper@3.9.8 LWA-2026-5525T1195.002T1059.007T1059T1082T1102
- wrangler-deploy@1.5.5 LWA-2026-5523T1195.002T1059.007
- wp-boilerplate@1.0.1 LWA-2026-5522T1195.002
- work-planner-client@1.0.0 LWA-2026-5521T1195.002T1059T1082T1041
- chai-solidity-testkit@1.6.1 LWA-2026-5519T1195.002T1059.007T1105T1071.001
- workbox-stable-xyz@1.0.0 LWA-2026-5517T1195.002T1059.007T1082T1071.001T1041
- wordsmith-kit@1.0.0 LWA-2026-5516T1195.002T1059.007T1059T1564.003T1071.001
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.