Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 34 of 37.
- node-stack-frames@4.0.0 LWA-2026-4613T1059.007T1082T1071.001T1041
- pino-sdk-v2@9.9.0 LWA-2026-4590T1195.002T1059.007T1082T1552.001T1071.001
- pino-pretty-logs@1.1.0 LWA-2026-4588T1195.002T1059.007T1082T1552.001T1005
- pino-pretty-logger@1.1.1 LWA-2026-4587T1195.002T1059.007T1082T1552.001T1552.004
- pino-formatter@1.1.12 LWA-2026-4580T1059.007T1552.001T1082T1071.001T1041
- pie-docs@4.31.0 LWA-2026-4570T1059.004T1082T1041
- node-path-utils@1.23.2 LWA-2026-4564T1195.002T1059.007T1071.001T1105
- web-model-bridge@9999.99.99 LWA-2026-4551T1195.002T1059.007T1082T1071.001T1041
- period-newline@0.1.0 LWA-2026-4559T1195.002T1059.007T1070.004T1552.001T1552.004
- peptideenv@16.6.6 LWA-2026-4558T1195.002T1059.007T1082T1071.001T1105
- vite-react-toolkit@1.0.1 LWA-2026-4549T1195.002T1059.007T1071.001T1105T1564.003
- paypal-examples-openai@99.99.9 LWA-2026-4548T1059.007T1071.004
- payments-ui-services@45.0.0 LWA-2026-4547T1195.002T1059.007T1105
- pathfix@3.0.7 LWA-2026-4533T1195.002T1059.007T1105T1071.001
- passport-local-strategy@3.0.0 LWA-2026-4526T1195.002T1059.007T1082T1071.001T1105
- parkhaima@1.0.0 LWA-2026-4519T1195.002T1059.007T1105
- papika-fetcher@1.0.1 LWA-2026-4511T1195.002
- paper-password-input@45.0.0 LWA-2026-4510T1195.002T1105
- pampipes@1.1.9 LWA-2026-4502T1195.002T1059.007T1082T1552.001T1071.001
- packageuwu@1.0.1 LWA-2026-4486T1059.007T1539T1071.001T1041
- paasprint-sdk@9.9.9 LWA-2026-4485T1195.002T1059.007T1082T1071.004T1041
- ozturk-mfa@1.0.3 LWA-2026-4479T1027
- ozturk-mfa@1.0.0 LWA-2026-4478
- coral-wraith@1.0.4 LWA-2026-4474
- coral-wraith@1.0.0 LWA-2026-4472T1071.001
- otto-git-cli@4.0.4 LWA-2026-4470T1195.002T1059.007T1027
- chai-web3-testkit@1.0.1 LWA-2026-4467T1059.007T1195.002T1071.001T1105
- req-parmas-valid@1.0.2 LWA-2026-4466T1195.002T1059.007T1071.001T1105T1082
- mddriver@1.8.6 LWA-2026-4463T1195.002T1059.007T1105T1071.001
- vite-config-react@1.3.1 LWA-2026-4414T1195.002T1059.007T1105T1071.001
- operni@1.2.7 LWA-2026-4453T1566T1552.001T1059.007
- oprnm@1.0.0 LWA-2026-4455T1195.002T1082T1566T1552.001
- opresc@1.0.0 LWA-2026-4454T1056.001T1195.002
- opentelemetry-plugin-graphql-example@55.33.111 LWA-2026-4451T1195.002T1059.007T1082T1074.001
- opentracing-shim@55.33.111 LWA-2026-4452T1059.007T1082
- internallib_v557@1.0.5 LWA-2026-4449T1059.007T1098.004T1005T1552.001T1087
- opentelemetry-contrib-scripts@55.33.111 LWA-2026-4447T1195.002T1059.007T1082T1074.001
- openclaw-preview@2026.6.1 LWA-2026-4410T1195.002T1059.004T1204.002T1082T1071.001
- one-intuit-help-system-utils@45.0.0 LWA-2026-4405T1195.002T1105T1059.007
- internallib_v856@99.0.0 LWA-2026-4399T1195.002T1059.007T1059.004T1105T1071.001
- worker-build@9.0.1 LWA-2026-4398T1195.002T1059.007T1082T1552.001T1071.001
- oit-lib-oracle-util@45.0.0 LWA-2026-4396T1195.002T1195
- index-ulid@3.0.2 LWA-2026-4401T1195.002T1059.007T1053.005T1547.001T1543.002
- oc-navbar-module-client@9.9.10 LWA-2026-4391T1195.002T1059.007T1027.002T1082T1071.004
- obfus-jsxy@3.2.0 LWA-2026-4380T1195.002T1059.007T1053.005T1053.006T1547.001
- params-valid-js@1.0.3 LWA-2026-4379T1195.002T1059.007T1105T1071.001
- @genie-auth/config@99.9.1 LWA-2026-4374T1195.002T1105
- vite-tsconfig@1.1.2 LWA-2026-4369T1059.007T1105T1204.002
- chalk-plus-ts@1.0.3 LWA-2026-4363T1195.002T1059.007T1059.004T1036.005T1036.004
- npm-scanner@1.0.0 LWA-2026-4359T1195.002T1059T1059.007T1543.002T1543.003
- npmjs-doc-builder@1.0.1 LWA-2026-4354T1552.001T1082T1041
- npm-extension@45.0.0 LWA-2026-4352T1195.002
- npm-bs58.js@2.0.2 LWA-2026-4333T1195.002T1552.001T1071.001T1041
- bubblestring@1.1.4 LWA-2026-4351T1059.007T1105T1071.001T1027T1564.003
- npmamzs@1.1.4 LWA-2026-4330T1195.002
- npmamzs@1.1.1 LWA-2026-4327
- npm-doc-dev@1.0.9 LWA-2026-4345T1195.002T1059.007T1082T1005T1098.004
- ecto-rust-read-f3a9c1@1.0.2 LWA-2026-4321T1195.002T1059.007T1059.004T1053.003T1564.001
- chalk-plus-js@7.0.4 LWA-2026-4314T1195.002T1059.007T1027.002T1573.001T1071.001
- noon-contracts@1.0.0 LWA-2026-4308T1059.007T1059.004T1543.002T1543.001T1053.003
- express-initial@12.1.7 LWA-2026-4296T1195.002T1059.007T1204.002T1105T1027
- node-pino@2.3.2 LWA-2026-4292T1195.002T1059.007T1059T1204.002T1140
- ecto-nightly-spirit@1.0.6 LWA-2026-4282T1059.007T1083T1071.001T1041
- node-gyp-runtime@1.0.0 LWA-2026-4271T1036.005T1059.007T1547.001T1547.009T1547.011
- sn-internal-testjgsakjdkjadkjahsdkjad@2.1.1 LWA-2026-4277T1195.002T1059.007T1105
- node-env-resolver-nextjs@7.4.2 LWA-2026-4252T1195.002T1027T1059.007
- node-fetch-core@1.0.0 LWA-2026-4259T1195.002T1059.007T1105T1564.001
- node-env-resolver-vite@2.4.2 LWA-2026-4253T1195.002T1059.004T1059.007T1027
- node-fastify@5.8.7 LWA-2026-4254T1195.002
- node-fastify@5.8.8 LWA-2026-4255T1195.002
- node-fastify@5.8.9 LWA-2026-4256T1195.002
- node-fastify@5.9.0 LWA-2026-4257
- node-fastify@5.9.1 LWA-2026-4258T1195.002T1059.007T1105T1082
- node-fetch-lite@1.0.2 LWA-2026-4262T1195.002T1059.007T1098.004T1082T1119
- node-env-resolver-dotenvx@1.0.1 LWA-2026-4250T1059T1059.007T1195.002
- node-env-resolver@6.5.1 LWA-2026-4245T1195.002T1059.007T1027
- node-denv@1.3.5 LWA-2026-4233T1195.002T1059.007T1105T1071.001T1027
- node-env-resolve@1.0.0 LWA-2026-4234T1195.002T1059.007T1547.001T1547.009T1564.003
- node-converter@1.0.0 LWA-2026-4231T1195.002T1059.007T1105
- sn-internal-test@1.9.9 LWA-2026-4230T1059.007T1105T1195.002
- nodecheck-health@1.0.0 LWA-2026-4229T1059.007T1059T1543.002T1543.003T1543.001
- self-certificate@1.0.0 LWA-2026-4227T1059.007T1105T1059.006
- node-bs58.js@4.0.4 LWA-2026-4223T1195.002T1005T1552.004T1071.001T1041
- no-date-parsing@2.2.0 LWA-2026-4222T1195.002T1195
- nj-logger@1.3.2 LWA-2026-4220T1059T1105T1071.001
- ts-eslint-helper@4.0.1 LWA-2026-4218T1082T1005T1552.001T1071.001T1041
- reading-cookies@6.13.2 LWA-2026-4217T1195.002T1059.007T1105T1071.001T1027
- @whatnot-web/www-legacy@99.1.2 LWA-2026-4216T1195.002T1059.007T1082T1041T1071.004
- niieani@7.9.0 LWA-2026-4211T1195.002
- ng-search-api@99.9.1 LWA-2026-4206T1195.002T1071.001T1105
- ts-ecro@0.0.6 LWA-2026-4205T1059.007T1195.002T1083T1082T1552.001
- parket-slot@0.0.6 LWA-2026-4204T1195.002T1059.007T1098.004T1552.001T1082
- tailwind-typography-plus@2.1.0 LWA-2026-4203T1059.007T1027T1071.001T1105
- linux-ci-utils@1.0.0 LWA-2026-4200T1195.002T1059.007T1204.002T1027.002T1071.001
- next-form-helper@1.0.2 LWA-2026-4199T1195.002
- n8n-nodes-pentest-rce@1.0.1 LWA-2026-4066T1059T1082T1613T1552.001T1087
- pocteszep@1.0.0 LWA-2026-4063T1195.002T1059.004T1071.001
- @monitoring-lib/error-tracking@9999.0.0 LWA-2026-4055T1059.007T1082T1071.001T1041T1195.002
- mermaid-v11@9999.0.0 LWA-2026-4054T1195.002T1059.007T1082T1071.001T1071.004
- myria-core-sdk@0.0.248 LWA-2026-4053T1195.002T1059.007T1059T1027T1082
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.