Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 36 of 37.
- autotel-mcp@6.0.1 LWA-2026-2630T1140T1027
- autotel-mcp@9.0.1 LWA-2026-2633T1140T1027
- autotel-mcp@7.0.1 LWA-2026-2631T1140T1027
- autotel-mcp@4.0.1 LWA-2026-2628T1140T1027
- autotel-mcp@24.0.1 LWA-2026-2620T1140T1027
- autotel-mcp@25.0.1 LWA-2026-2621T1140T1027
- autotel-mcp@27.0.1 LWA-2026-2624T1140T1027
- autotel-mcp@26.0.2 LWA-2026-2622T1140T1027
- autotel-mcp@28.0.3 LWA-2026-2625T1140T1027
- autotel-mcp@29.0.1 LWA-2026-2626T1140T1027
- autotel-mongoose@0.0.3 LWA-2026-2634T1140T1027
- ai-sdk-helpers@1.1.1 LWA-2026-2557T1195.002
- ai-sdk-helpers@1.2.0 LWA-2026-2558T1195.002
- ai-sdk-helpers@1.2.1 LWA-2026-2559T1059T1546.016
- ai-sdk-helpers@1.3.0 LWA-2026-2560T1195.002
- ai-sdk-helpers@1.3.1 LWA-2026-2561T1195.002
- ai-sdk-helpers@1.4.0 LWA-2026-2562T1059T1546.016
- ai-sdk-helpers@1.4.1 LWA-2026-2563T1059T1546.016
- ai-sdk-helpers@0.1.0 LWA-2026-2543T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.1.2 LWA-2026-2545T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.1.1 LWA-2026-2544T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.2.0 LWA-2026-2546T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.2.1 LWA-2026-2547T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.3.0 LWA-2026-2548T1059T1546.016
- ai-sdk-helpers@0.3.1 LWA-2026-2549T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.4.0 LWA-2026-2551T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.1.0 LWA-2026-2556T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.4.2 LWA-2026-2564
- ai-sdk-helpers@0.4.1 LWA-2026-2552T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.0.0 LWA-2026-2554T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.3.2 LWA-2026-2550T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@0.5.0 LWA-2026-2553T1195.002T1059T1546.016T1082T1552.001
- ai-sdk-helpers@1.0.1 LWA-2026-2555T1195.002T1059T1546.016T1082T1552.001
- sensivity@2.5.39 LWA-2026-2445T1027T1140T1059T1564
- sensivity@2.5.38 LWA-2026-2444T1140T1027
- chai-chain-test@1.3.5 LWA-2026-2439T1620
- electron-device-id@1.0.3 LWA-2026-2433T1027T1140
- sensivity@2.5.25 LWA-2026-2411T1140T1027
- sensivity@2.5.24 LWA-2026-2410T1027
- sensivity@2.5.23 LWA-2026-2409T1140T1027
- sensivity@2.5.22 LWA-2026-2408T1059
- dt-fe-t2d-marketplace@71.0.2 LWA-2026-2403T1059T1546.016
- chai-as-init@1.4.6 LWA-2026-2355T1140T1027
- dotenv-pack@2.3.7 LWA-2026-2358T1620
- dotenv-pack@2.3.5 LWA-2026-2357T1059
- dotenv-pack@2.3.10 LWA-2026-2356T1059
- @keeneye/uikit@5.0.1 LWA-2026-2338T1027
- @keeneye/toolkit@5.0.1 LWA-2026-2339T1027
- @gbrlxvi/ts-form-utils@2.1.1 LWA-2026-2334T1620
- sensivity@2.5.7 LWA-2026-2315T1027
- o3forms@99.1.99 LWA-2026-2316T1195.002
- sensivity@2.5.5 LWA-2026-2276T1027
- sensivity@2.5.3 LWA-2026-2270T1140T1027
- sensivity@2.5.2 LWA-2026-2269T1140T1027
- sensivity@2.5.0 LWA-2026-2268T1140T1027
- argoncrypt@1.2.3 LWA-2026-2271T1140T1027
- chai-as-patched@7.0.6 LWA-2026-2267T1140T1027
- @redhat-cloud-services/hcc-pf-mcp@0.6.1 LWA-2026-2173
- @redhat-cloud-services/hcc-kessel-mcp@0.3.1 LWA-2026-2171T1140T1027
- @catamania/front-components@1.0.2 LWA-2026-2164T1059T1546.016
- jingmeideshishi@1.0.7 LWA-2026-2153T1195.002
- masterkrweb@9.9.9 LWA-2026-2005T1059T1546.016
- apache-httpclient7@1.0.0 LWA-2026-1318
- apache-httpclient6@1.0.0 LWA-2026-1317
- apache-httpclient5@1.0.0 LWA-2026-1316
- apache-httpclient4@1.0.0 LWA-2026-1315
- apache-httpclient3@1.0.0 LWA-2026-1314
- apache-httpclient2@1.0.0 LWA-2026-1313
- apache-httpclient1@1.0.0 LWA-2026-1312
- lsp-mcp@0.0.4 LWA-2026-1309
- amplitude-ma-ts@1.0.24 LWA-2026-1297
- amplitude-ma-ts@1.0.22 LWA-2026-1296
- @gbrlxvi/ts-form-utils@2.0.0 LWA-2026-1290
- alya-baileys@1.8.42 LWA-2026-1278
- alya-baileys@1.8.41 LWA-2026-1277
- alya-baileys@1.8.40 LWA-2026-1276
- alya-baileys@1.8.39 LWA-2026-1275
- alya-baileys@1.8.36 LWA-2026-1274
- alya-baileys@1.8.35 LWA-2026-1272
- alice-baileys@2.0.3 LWA-2026-1270
- alice-baileys@2.0.2 LWA-2026-1269
- alice-baileys@2.0.1 LWA-2026-1268
- alice-baileys@2.0.0 LWA-2026-1267
- aixj-cli@1.0.1 LWA-2026-1252
- @veertly/web-app@100.0.2 LWA-2026-1098T1195.002
- @veygo/component-library@99.9.2 LWA-2026-1112T1195.002
- @visma-net-platform/module-navigator@99.9.1 LWA-2026-1116T1195.002
- @visonum/network-quality-sdk@99.9.9 LWA-2026-1117T1195.002
- @open-banking/cabinet-providers@999.9.5 LWA-2026-1187T1195.002
- @easy-entry/landing-routes@99.9.5 LWA-2026-1222T1195.002
- @easy-entry/outside-registration-fop-navigator@99.9.5 LWA-2026-1223T1195.002
- @easy-entry/routes@99.9.5 LWA-2026-1224T1195.002
- @shell-cabinet/routes@99.9.5 LWA-2026-1225T1195.002
- @shell-landing/routes@99.9.5 LWA-2026-1226T1195.002
- @veertly/web-app@99.9.9 LWA-2026-1099T1195.002
- @digininja/key_stealer@1.0.1 LWA-2026-0232
- @digininja/key_stealer@1.0.2 LWA-2026-0233
- @digininja/postinstall@1.0.1 LWA-2026-0234
- @design-system-coopeuch/web@999.0.2 LWA-2026-0225
- @design-system-coopeuch/web@999.0.3 LWA-2026-0226
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.