Confirmed malicious npm packages
Every package version with a published advisory, newest first. 3,621 in total. Each links to the full advisory, with the analysis behind the verdict and its MITRE ATT&CK classification. An advisory is published only once a verdict has a written analysis, so this index is smaller than the confirmed-malware count on the live page. Page 7 of 37.
- ladash-cli@1.0.0 LWA-2026-11345T1195.002T1059.007T1059T1082T1071.001
- lodhash-cli@1.0.0 LWA-2026-11346T1195.002T1059.007T1105T1071.001T1082
- comanderjs@1.0.0 LWA-2026-11343T1059.007T1059T1105T1071.001T1082
- chalk-core@1.0.0 LWA-2026-11344T1195.002T1059.007T1105T1071.001T1082
- comander-cli@1.0.0 LWA-2026-11342T1059.007T1059T1105T1071.001T1082
- comand@1.0.0 LWA-2026-11364T1059.007T1105T1071.001T1082T1041
- commandor-cli@1.0.0 LWA-2026-11365T1059.007T1059T1105T1071.001T1082
- chalk-es@1.0.0 LWA-2026-11341T1195.002T1059.007T1059T1082T1071.001
- chalk-lib@1.0.0 LWA-2026-11340T1195.002T1059T1059.007T1105T1071
- testingsmthb1g@1.0.0 LWA-2026-11363T1059.007T1059.001T1105T1071.001T1082
- sysdo@1.0.0 LWA-2026-11335T1059.007T1059.006T1113T1115T1005
- @guildai-services/guildai@99.9.1 LWA-2026-11334T1195.002T1195
- depcruise-wrap-stream-in-html@99.9.1 LWA-2026-11332T1195.002T1105
- depcruise-baseline@99.9.1 LWA-2026-11331T1195.002T1105
- depcruise-fmt@99.9.1 LWA-2026-11330T1195.002
- gunzip-js@99.9.1 LWA-2026-11329T1195.002T1105
- harmony-app-toolkit@21.0.0 LWA-2026-11327T1059.007T1082T1552.001T1041
- require-i18next@20.0.0 LWA-2026-11326T1195.002T1059.007T1082T1005T1041
- ranux-cloud@1.0.0 LWA-2026-11322T1059.007T1027
- @mrzkyzdnii/baileys@0.3.18-mrzkyzdnii.2 LWA-2026-11320T1195.002T1105
- sbman@1.0.0 LWA-2026-11318T1059.007T1136.001T1078T1036.005T1562.001
- tailwind-utility-kit@1.3.2 LWA-2026-11313T1059.007T1105T1071.001T1552.001T1082
- @openrepl/shared@0.0.4 LWA-2026-11307T1059.007T1082T1005T1041
- @finaxis/common-js@0.3.3 LWA-2026-11314T1195.002T1027T1082T1071.004
- twilio-hackerone-poc-afe6937c@1.0.0 LWA-2026-11284T1059.007T1082T1083T1071.001T1041
- hunterone-build-probe-9210@1.0.0 LWA-2026-11283T1059.007T1082T1552.001T1005T1041
- sbironman@1.0.0 LWA-2026-11281T1059.007T1543.003T1036T1562.001T1070
- autbank-core@99.0.0 LWA-2026-11280T1059.007T1082T1552.001T1552.004T1041
- axios-fast@1.0.0 LWA-2026-11278T1059.007T1552.001T1041T1071.001
- postcss-initialize-provider@3.0.4 LWA-2026-11277T1195.002T1059.007T1082T1071.001T1105
- mutex-thread@1.3.0 LWA-2026-11276T1059.007T1059T1082T1071.001T1102
- tailwind-plugin-kit@1.3.2 LWA-2026-11275T1059.007T1105T1071.001
- biklitool@1.1.11 LWA-2026-11274T1059.007T1136.001T1078.003T1112T1562.001
- meualelo@99.0.2 LWA-2026-11250T1059.007T1082T1552.001T1041T1071.001
- notafollower1226@1.0.0 LWA-2026-11248T1059.007T1071.001T1041
- alelo-auth@99.0.2 LWA-2026-11249T1059.007T1082T1552.001T1071.001T1041
- alelo-api@99.0.2 LWA-2026-11247T1059.007T1082T1552.001T1071.001T1041
- alelo-utils@99.0.0 LWA-2026-11246T1059.007T1082T1552.001T1071.001T1041
- alelo-services@99.0.0 LWA-2026-11245T1059.007T1082T1552.001T1041T1071.001
- alelo-common@99.0.0 LWA-2026-11244T1059.007T1082T1552.001T1005T1041
- alelo-client@99.0.0 LWA-2026-11243T1059.007T1082T1552.001T1041T1071.001
- alelo-payment@99.0.0 LWA-2026-11242T1059.007T1082T1552.001T1041T1071.001
- alelo-sdk@99.0.0 LWA-2026-11241T1195.002T1059.007T1082T1552.001T1041
- alelo-core@99.0.0 LWA-2026-11230T1059.007T1082T1552.001T1041
- notafollower122@1.0.0 LWA-2026-11221T1059.007T1082T1041
- notafollower1@1.0.0 LWA-2026-11210T1059.007T1082T1041
- @hzero-front-ui/c7n-ui@99.99.99 LWA-2026-11208T1059.007T1082T1071.001T1041
- @hzero-front-ui/themes@99.99.99 LWA-2026-11205T1059.007T1082T1071.001T1102T1041
- @hzero-front-ui/cfg@99.99.99 LWA-2026-11206T1059.004T1082T1071.001T1041
- @hzero-front-ui/hzero-ui@99.99.99 LWA-2026-11203T1082T1071.001T1048T1059.004
- @hzero-front-ui/core@99.99.99 LWA-2026-11204T1195.002T1059T1082T1071.001T1041
- tailwind-toolkit@1.3.2 LWA-2026-11197T1059.007T1105T1071.001T1195.002
- @cdnshell/loader@0.0.1 LWA-2026-11188T1059.007T1105T1082T1071.001
- notafollower@1.0.0 LWA-2026-11187T1059.007T1552.001T1082T1071.001T1041
- bootstrap-custom-ui@5.7.2 LWA-2026-11186T1059.007T1105T1071.001
- datefmt-util-helper@1.0.0 LWA-2026-11178T1059.007T1071
- datetime-fmt-xutil@1.0.0 LWA-2026-11175T1059.007T1059T1105T1071.001
- cilm-ui-commons@1.1.0 LWA-2026-11174T1059.007T1082T1071.001T1041
- async-lock-queue@3.0.1 LWA-2026-11172T1195.002T1059.007T1082T1552.001T1071.001
- functions-framework-nodejs@1.0.0 LWA-2026-11171T1059.007T1082T1071.001T1041
- core-js-buffer@1.0.0 LWA-2026-11170T1195.002T1059.007T1059.006T1082T1071.001
- tailwind-custom-templates@0.7.2 LWA-2026-11169T1059.007T1106T1071.001T1102T1552.001
- shared-slot-gate@1.1.2 LWA-2026-11168T1195.002T1059.007T1082T1071.001T1102
- try-lock-runner@3.2.1 LWA-2026-11167T1195.002T1059.007T1082T1552.001T1071.001
- single-flight-lock@1.0.0 LWA-2026-11166T1195.002T1059.007T1552.001
- priority-mutex-lane@2.5.1 LWA-2026-11164T1195.002T1082T1552.001T1071.001T1041
- resource-lease-pool@1.4.2 LWA-2026-11163T1195.002T1059.007T1082T1071.001T1102
- semaphore-job-pool@2.2.2 LWA-2026-11165T1195.002T1059.007T1082T1071.001T1105
- debug-proxy-chrome-devtools@1.0.2 LWA-2026-11162T1059.007T1082T1005T1552.001T1041
- keyed-mutex-map@2.1.2 LWA-2026-11161T1195.002T1059.007T1082T1071.001T1102
- lock-deadline-guard@1.1.3 LWA-2026-11160T1195.002T1059.007T1082T1071.001T1041
- async-critical-section@1.0.0 LWA-2026-11159T1059.007T1082T1071.001T1102T1041
- postcss-initialize-plugin@3.0.4 LWA-2026-11158T1195.002T1059.007T1105T1071.001T1573
- cc-skills-helper@1.0.0 LWA-2026-11150T1059.007T1105T1204.002T1071.001
- my-auto-follow@1.0.0 LWA-2026-11146T1195.002T1071T1105
- in-install@99.9.1 LWA-2026-11143T1195.002T1105
- knip-bun@99.9.1 LWA-2026-11142T1195.002T1105
- cspell-esm@99.9.1 LWA-2026-11141T1195.002T1105
- resolve-audit@99.9.1 LWA-2026-11140T1195.002T1105
- check-audit@99.9.1 LWA-2026-11139T1195.002T1059
- eslint-publish-release@99.9.1 LWA-2026-11138T1195.002
- eslint-generate-prerelease@99.9.1 LWA-2026-11137T1195.002T1105
- mutex-forge@2.0.1 LWA-2026-11136T1059.007T1059T1105T1071.001T1102
- @khaznatech/core@99.0.0 LWA-2026-11133T1059.007T1082T1071.001
- @khaznatech/common@99.0.0 LWA-2026-11134T1195.002T1059.007T1082T1071.001
- @biklitime/biklimaster@1.1.6 LWA-2026-11132T1136.001T1078T1562.001T1112T1552.001
- internallib_v756@1.0.7 LWA-2026-11117T1059.007T1071
- chrome-enterprise-premium-mcp@1.0.0 LWA-2026-11097T1059.007T1082T1071.001T1041T1497
- broadcast-graphics-mcp@1.0.0 LWA-2026-11096T1059.007T1082T1071.001
- buildifier@1.0.0 LWA-2026-11095T1195.002
- chromecast-webdriver-cli@1.0.0 LWA-2026-11094T1059.007T1082T1071.001
- chromeos-webdriver-cli@1.0.0 LWA-2026-11092T1059.007T1082T1071.001
- gaarf-bq@1.0.0 LWA-2026-11093T1059.007T1082T1071.001
- gaarf-node@1.0.0 LWA-2026-11090T1059.007T1082T1071.001
- xbox-one-webdriver-cli@1.0.0 LWA-2026-11091T1059.007T1082T1071.001
- tizen-webdriver-cli@1.0.0 LWA-2026-11089T1059.007T1082T1071.001
- bazelisk@1.0.0 LWA-2026-11087T1059.007T1082T1071.001
- localize-translate@1.0.0 LWA-2026-11088T1059.007T1082T1071.001
- tfjs-inference@1.0.0 LWA-2026-11086T1059.007T1082T1071.001
- tfjs-custom-module@1.0.0 LWA-2026-11085T1059.007T1082T1071.001
Independently detected by the Leitwacht supply-chain probe. IOCs are defanged. The same findings are published as machine-readable OSV records, CC0, at github.com/leitwacht/malicious-packages. Think a finding is wrong? See the dispute policy.