Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 32 of 37.
- trgrip@1.0.4 LWA-2026-5326T1195.002T1059.007T1059T1105T1071.001
- chai-plugin@4.5.2 LWA-2026-5325T1195.002T1059.007T1105T1071.001
- transform-object-rest-spread@6.26.0 LWA-2026-5324T1195.002
- transform-object-assign@6.22.0 LWA-2026-5323T1195.002T1059.007
- tool-logger@1.0.0 LWA-2026-5316T1071.001
- tracing-str@1.0.0 LWA-2026-5317T1195.002
- transform-define@2.3.1 LWA-2026-5311
- transform-es2015-classes@6.25.1 LWA-2026-5312T1195.002T1195
- transform-es3-member-expression-literals@6.24.0 LWA-2026-5315T1195.002T1195
- transform-es2015-destructuring@6.24.1 LWA-2026-5313T1195.002T1059T1071
- transform-es2015-typeof-symbol@6.24.1 LWA-2026-5314T1195.002T1105
- tradepilot@2.3.3 LWA-2026-5307T1195.002T1059.007T1071.001T1105T1552.001
- tracking-service-config@90.0.0 LWA-2026-5305T1195.002
- totally-safe-util@1.0.1 LWA-2026-5304T1059.007T1071.001T1105T1552.004T1552.001
- totally-legit-web-pack@1.2.5 LWA-2026-5301T1195.002T1059.007T1082
- toast-react-slider@1.0.0 LWA-2026-5300T1195T1059.007T1059.003T1027T1105
- tiny-string-parser@0.1.2 LWA-2026-5298T1059.007T1082T1083T1552.001T1552.004
- hemi-supply-cron@999.0.0 LWA-2026-5296T1195.002T1059.007T1082T1552.001T1071.001
- thienc-cdn@1.0.0 LWA-2026-5293T1195.002T1185T1505.003T1102
- third-sender@1.0.0 LWA-2026-5294
- ve-hemi-rewards@999.0.0 LWA-2026-5289T1195.002T1059.007T1082T1552.001T1071.001
- token-prices-cron@999.0.0 LWA-2026-5288T1195.002T1059.007T1082T1552.001T1071.001
- vaults-monitor-cron@999.0.0 LWA-2026-5287T1195.002T1059.007T1082T1552T1041
- hemi-earn-actions@999.0.0 LWA-2026-5286T1195.002T1059.007T1082T1552.001T1041
- portal-backend@999.0.0 LWA-2026-5285T1195.002T1059.007T1082T1552.001T1071.001
- thepackagethatworks_@1.0.2 LWA-2026-5292T1195.002T1059.007T1552.001T1567T1071.001
- tg-msg-effect@1.0.10 LWA-2026-5281T1195.002T1059.007T1082T1005T1041
- texttweak-kit@1.0.0 LWA-2026-5280T1059.007T1059T1564.003T1543.003T1071.001
- textify-kit@1.0.0 LWA-2026-5279T1059.007T1059.003T1564.003T1027T1071.001
- textdecode@1.2.7 LWA-2026-5278T1195.002T1059.007T1059.001T1082T1555.003
- tether-base@99.0.0 LWA-2026-5276T1195.002T1059.004T1082T1041T1071.001
- testzapier@1.0.0 LWA-2026-5274T1059.007T1082T1005T1041T1071.001
- testssdd@1.0.0 LWA-2026-5273T1071.001T1105
- test-multi-versions@1.0.0 LWA-2026-5270T1195.002
- test-nonmal-pkg-5@1.0.1 LWA-2026-5271T1059.007T1082T1552.001T1041
- test-leakage-attack-node@1.0.0 LWA-2026-5269T1059.007T1082T1041
- test-delete-package@99.0.0-dummy LWA-2026-5267T1195.002
- testatesta@1.0.2 LWA-2026-5266T1195.002
- tn-advertisement@5.0.0 LWA-2026-5264T1059.007T1071.001
- tecken@0.1.10 LWA-2026-5257T1059.004T1082T1071.001T1041
- tdhg-demp@1.0.0 LWA-2026-5256T1059.007T1082T1071.004T1041T1195.002
- tailwind-scroller@1.0.2 LWA-2026-5255T1195.002T1059.007T1071.001T1105
- tailwindcss-svg-helper@1.17.9 LWA-2026-5253T1195.002T1059.007T1105T1071.001
- tailwindcss-framer-motion@1.1.3 LWA-2026-5252T1195.002T1059.007T1071.001T1105T1082
- tailwindcss-devtools@1.4.0 LWA-2026-5251T1195.002T1059.007T1071.001T1105T1082
- electron-internal-utils@1.0.0 LWA-2026-5250T1195.002T1059.004T1071.001
- tailwindcss-animate-builder@2.1.0 LWA-2026-5249T1195.002T1059.007T1071.001T1105
- tailwind-core@4.3.0 LWA-2026-5248T1195.002T1059.007T1027
- tailmagic@2.3.2 LWA-2026-5246T1195.002T1059.007T1105T1071.001
- tabbables@45.0.0 LWA-2026-5245T1195.002T1105
- system-driver@1.0.1 LWA-2026-5244T1059.007T1098.004T1082T1567T1105
- system-drive@1.0.0 LWA-2026-5243T1195.002T1059.007T1543.002T1082T1083
- sycm-vendors@55.0.0 LWA-2026-5242T1195.002T1105
- swplayer-react-sl@1.0.5 LWA-2026-5241T1195.002T1059.007T1105T1071.001T1041
- swagger-express-validators@1.0.0 LWA-2026-5240T1059.007T1071.001T1082T1195.002
- svg2text@3.0.0 LWA-2026-5239T1195.002T1059.007T1082T1555.003T1552.001
- super-useful-omega-package-123@0.2.1 LWA-2026-5237T1059.007T1105T1071.001
- super-test-json@1.2.0 LWA-2026-5230T1485T1489T1552.001T1082
- stylelint-standard@1.2.0 LWA-2026-5229T1195.002T1059.007T1059T1573T1140
- strutil-kit@1.0.0 LWA-2026-5228T1059.007T1204.002T1564.003T1027T1105
- sort-btree@2.1.5 LWA-2026-5179
- str-master@1.0.11 LWA-2026-5204T1195.002T1059.007T1204.002T1564.003T1027
- strmagic-kit@1.0.0 LWA-2026-5202T1059.007T1204.002T1027T1564.003
- string-utils-kit@1.0.0 LWA-2026-5200T1195.002T1059.007T1204.002T1564.003T1543
- stringsculpt-kit@1.0.0 LWA-2026-5199T1059.007T1059.003T1564.003T1027T1204.002
- stringfy-utils-kit@1.0.0 LWA-2026-5197T1195.002T1059.007T1204.002T1564.003T1480
- streamvault@1.0.1 LWA-2026-5193T1195.002T1059.007T1071.001T1105
- st-pathhelper@1.0.0 LWA-2026-5192T1082T1071.001T1573.001T1059.007T1041
- st-biginteger@5.0.5 LWA-2026-5189T1195.002T1059.007
- st-bigintr@5.0.5 LWA-2026-5190T1195.002T1059.007
- stacknova@1.0.0 LWA-2026-5187T1195.002T1059.007T1082T1552.001T1105
- sqrt-bn-enhanced@2.0.9 LWA-2026-5186T1195.002T1059.007T1027T1552.001T1082
- spectral-corsair@999.999.1000 LWA-2026-5182T1195.002T1059.007T1082T1552.001T1071.001
- sort-destructure-keys@7.9.0 LWA-2026-5180T1195.002T1059.007
- sort-btree@2.1.4 LWA-2026-5178T1195.002T1059.007T1082T1071.001T1102.003
- solidity-compile-deploy@1.0.0 LWA-2026-5177T1059.007T1082T1041
- solana-token-api@1.0.0 LWA-2026-5174T1195.002T1059.007T1059.006T1027T1036.005
- solanarpclampweb3@1.0.3 LWA-2026-5173T1195.002T1552.001T1041T1071.001
- snavbox@1.0.1 LWA-2026-5172T1195.002T1059.007T1106T1027.002T1082
- slow-surf@10.0.0 LWA-2026-5170T1059.007T1082T1071.001T1041
- skipthedishes_react@0.1.0 LWA-2026-5169T1195.002T1059.004T1082T1041
- sjs-lint-build1@1.0.4 LWA-2026-5168
- sjs-builder@1.0.5 LWA-2026-5166T1195.002T1059.007T1105T1027
- sjs-builders@1.0.4 LWA-2026-5167T1059.007T1082T1005T1552.001T1041
- sisubeny-bun-pwn-payload-1@1.0.0 LWA-2026-5163T1059T1059.007T1082T1005T1041
- codyx-ai-windows-x64-baseline@1.14.42 LWA-2026-5158T1195.002T1027
- codyx-ai-windows-x64@1.14.42 LWA-2026-5156T1195.002T1027
- codyx-ai-windows-arm64@1.14.42 LWA-2026-5160T1195.002
- codyx-ai-darwin-x64-baseline@1.14.42 LWA-2026-5159T1195.002T1027
- codyx-ai@1.14.42 LWA-2026-5155T1059T1059.007T1204
- codyx-ai-linux-x64-baseline-musl@1.14.42 LWA-2026-5161T1195.002
- codyx-ai-linux-x64@1.14.42 LWA-2026-5162T1195.002
- codyx-ai-linux-x64-baseline@1.14.42 LWA-2026-5157T1195.002
- simple-auth-basic@2.0.2 LWA-2026-5150T1195.002T1059.007T1105T1071.001
- signature-transaction@1.1.0 LWA-2026-5149T1195.002T1059.007T1552.004T1071.001T1041
- sickle-wrapper@0.2.0 LWA-2026-5148T1059.007T1552.001T1552.004T1082T1005
- shadcn-ui-autocomplete@3.5.0 LWA-2026-5147T1059.007T1555.003T1082T1041T1071.001
- environment-gate@7.3.6 LWA-2026-5146T1059.007T1105
- sftc-advance-components@0.9.9 LWA-2026-5136T1195.002T1059.007T1082T1071.004T1041
- session-exp@1.3.20 LWA-2026-5131T1195.002T1059.007T1071.001T1105
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.