Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name ↕ | ecosystem ↕ | threat types | versions ↕ | |
|---|---|---|---|---|
| npm @marketfront/header | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/actualordersnippetpopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/advertisingdevtool | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/bannerpopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/baobabtech | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/basemarkettemplate | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/blenderdevtool | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/captchaservice | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/changefilter | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/commonecommerce | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/customdealsfeed | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/designsystemdevtool | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/devtoolsloader | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/digitalherobannercarousel | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/dynamicpageparams | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/errorcounter | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/fashiononboardingpopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/fingerprint | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/footer | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/gotoauthpopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/infopopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/livestreampreviewpopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/madvpopup | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/mychatspreloader | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @marketfront/navbar | npm | dependency_confusion, credential_stealer, data_exfiltration | 1 | |
| npm @tqm-mfe/main | npm | dependency_confusion, credential_stealer, data_exfiltration | 2 | |
| npm @immobiliarelabs/backstage-plugin-gitlab-backend | npm | worm, credential_stealer, data_exfiltration | 3 | |
| npm @immobiliarelabs/backstage-plugin-gitlab | npm | worm, credential_stealer, data_exfiltration | 4 | |
| npm @immobiliarelabs/backstage-plugin-ldap-auth-backend | npm | worm, credential_stealer, data_exfiltration | 5 | |
| npm @immobiliarelabs/backstage-plugin-ldap-auth | npm | worm, credential_stealer, data_exfiltration | 4 | |
| npm rstreams-shard-util | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-logger | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm rstreams-metrics | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-cdk-lib | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-auth | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-streams | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm serverless-convention | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-cache | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-connector-elasticsearch | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-connector-mysql | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-connector-redshift | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-connector-mongo | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-sdk | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm serverless-leo | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-cli | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-config | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-cron | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-aws | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm leo-connector-oracle | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm solo-nav | npm | worm, credential_stealer, data_exfiltration | 1 | |
| npm @apexcraft/nano-key | npm | credential_stealer, data_exfiltration, persistence, crypto_drainer, c2_agent, typosquat, other | 9 | |
| npm @bytemend/mfebus | npm | credential_stealer, data_exfiltration, persistence, typosquat | 1 | |
| npm @chunklab/hexparse | npm | credential_stealer, data_exfiltration, persistence, typosquat | 4 | |
| npm @zynkit/jwtbytes | npm | credential_stealer, data_exfiltration, persistence, typosquat | 5 | |
| npm @zynkit/probe | npm | other | 1 | |
| npm @frostnode/probe | npm | other | 1 | |
| npm @gleamkit/probe | npm | other | 1 | |
| npm @petitcode/eb-retry | npm | credential_stealer, data_exfiltration, persistence, typosquat | 1 | |
| npm @tinyfox/shapecheck | npm | credential_stealer, data_exfiltration, persistence, typosquat | 5 | |
| npm @glitchpad/throttler | npm | credential_stealer, data_exfiltration, persistence, typosquat | 5 | |
| npm @thymelab/logfx | npm | credential_stealer, data_exfiltration, persistence, typosquat | 1 | |
| npm @briskforge/envcheck | npm | credential_stealer, data_exfiltration, persistence, typosquat | 3 | |
| npm @lazyutil/dater | npm | credential_stealer, data_exfiltration, persistence, typosquat | 4 | |
| npm @frostnode/waitfor | npm | credential_stealer, data_exfiltration, persistence, typosquat | 4 | |
| npm @nullzero/urlcat | npm | credential_stealer, data_exfiltration, persistence, typosquat | 4 | |
| npm apintergrationpost | npm | rat, c2_agent, persistence | 6 | |
| npm @withgoogle/stitch-sdk | npm | credential_stealer, data_exfiltration | 2 | |
| npm easy-day-js | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence, typosquat | 2 | |
| npm @mastra/acp | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/agent-browser | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/agent-builder | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/agentcore | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/agentfs | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/ai-sdk | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/arize | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/arthur | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/astra | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-auth0 | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-better-auth | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-clerk | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-cloud | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-firebase | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-okta | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-studio | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-supabase | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/auth-workos | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/azure | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/blaxel | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/braintrust | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/brightdata | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/browser-firecrawl | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/browser-viewer | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/chroma | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/clickhouse | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/claude | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/client-js | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/cloud | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/cloudflare | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/cloudflare-d1 | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/codemod | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/convex | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/core | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/couchbase | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/cursor | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/dane | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/datadog | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/daytona | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/deployer | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/deployer-cloud | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/deployer-cloudflare | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/deployer-netlify | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/deployer-vercel | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/docker | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/dsql | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/duckdb | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/dynamodb | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/e2b | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/editor | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/elasticsearch | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/engine | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/evals | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/express | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/fastembed | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/fastify | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/files-sdk | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/gcs | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/github-signals | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/google-cloud-pubsub | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/google-drive | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/hono | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/inngest | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/koa | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/laminar | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/lance | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/langfuse | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/langsmith | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/libsql | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/loggers | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/longmemeval | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mcp | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mcp-docs-server | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mcp-registry-registry | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mem0 | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/memory | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/modal | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mongodb | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mssql | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/mysql | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/nestjs | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/node-audio | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/observability | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/openai | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/opencode | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/opensearch | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/otel-bridge | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/otel-exporter | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/perplexity | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/pg | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/pinecone | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/playground-ui | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/posthog | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/qdrant | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/rag | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/railway | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/react | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/redis | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/redis-streams | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/s3 | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/schema-compat | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/sentry | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/server | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/node-speaker | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/s3vectors | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/slack | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/spanner | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-azure | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-elevenlabs | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-google | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-ibm | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-murf | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-openai | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-replicate | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/speech-speechify | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/stagehand | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/tavily | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/temporal | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/turbopuffer | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/twilio | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/upstash | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/vectorize | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/vercel | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-aws-nova-sonic | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-azure | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-cloudflare | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-deepgram | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-elevenlabs | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-gladia | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-google | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-google-gemini-live | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-inworld | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-modelslab | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-murf | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-openai | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-openai-realtime | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-playai | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-sarvam | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-speechify | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm @mastra/voice-xai-realtime | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm create-mastra | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm mastra | npm | rat, c2_agent, crypto_drainer, credential_stealer, persistence | 1 | |
| npm procwire | npm | c2_agent, persistence, other | 1 | |
| npm routecraft | npm | typosquat, other | 1 | |
| npm endpointmap | npm | c2_agent, other | 1 | |
| npm bytecraft | npm | other | 1 | |
| npm staticlayer | npm | c2_agent, other | 1 | |
| npm atomic-lockfile | npm | credential_stealer, c2_agent, persistence, data_exfiltration, other | 1 | |
| npm js-digest | npm | credential_stealer, data_exfiltration, other | 1 | |
| crates onering | crates | data_exfiltration | 1 | |
| pypi gpt-pilot | pypi | credential_stealer, data_exfiltration, persistence | 1 | |
| pypi pantheon-toolsets | pypi | other | 2 | |
| pypi pantheon-agents | pypi | other | 2 | |
| pypi magique | pypi | other | 2 | |
| pypi magique-ai | pypi | other | 2 | |
| pypi executor-engine | pypi | other | 2 | |
| pypi executor-http | pypi | other | 2 | |
| pypi funcdesc | pypi | other | 2 | |
| pypi cmd2func | pypi | other | 2 | |
| pypi coolbox | pypi | other | 2 | |
| pypi ufish | pypi | other | 2 | |
| pypi napari-ufish | pypi | other | 2 | |
| pypi nucbox | pypi | other | 2 | |
| pypi okite | pypi | other | 2 | |
| pypi bramin | pypi | other | 3 | |
| pypi synago | pypi | other | 2 | |
| pypi mrbios | pypi | other | 2 | |
| pypi uprobe | pypi | other | 2 | |
| pypi spateo-release | pypi | other | 1 | |
| pypi dynamo-release | pypi | other | 1 | |
| pypi ppkt2synergy | pypi | other | 1 | |
| pypi mflux-streamlit | pypi | other | 2 | |
| pypi nhmpy | pypi | other | 1 | |
| pypi embiggen | pypi | other | 1 | |
| pypi gpsea | pypi | other | 1 | |
| pypi pyphetools | pypi | other | 1 | |
| pypi ensmallen | pypi | other | 1 | |
| npm weavedb-sdk | npm | credential_stealer, worm, crypto_drainer, data_exfiltration, persistence, c2_agent | 1 | |
| npm weavedb-lite | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-sdk-base | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm test-weavedb-sdk | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-warp-contracts-plugin-deploy | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm arnext-arkb | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-console | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm arnext | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm roidjs | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-exm-sdk | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm create-arnext-app | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-tools | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm wdb-core | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm cwao-tools | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm test-ajs | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm monade | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-exm-sdk-web | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm testnpmnmp | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm warp-contracts-plugin-deploy-test | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm wdb-cli | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm ai3 | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm cwao-units | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm atomic-notes | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm cwao | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-client | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm wdb-sdk | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-offchain | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm fpjson-lang | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-contracts | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-node-client | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm arjson | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm hbsig | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm zkjson | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm aonote | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-base | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm weavedb-sdk-node | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm wao | npm | credential_stealer, worm, data_exfiltration | 1 | |
| npm faster-axios | npm | typosquat, credential_stealer, rat, c2_agent, data_exfiltration, persistence | 2 | |
| npm turbo-axios | npm | typosquat, credential_stealer, c2_agent | 2 | |
| npm @emcd-vue/auth | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent, persistence | 3 | |
| npm @emcd-vue/loans | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent, persistence | 2 | |
| npm @emcd-vue/b2b-pay-form | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 2 | |
| npm @redhat-cloud-services/compliance-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/config-manager-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/entitlements-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/host-inventory-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/insights-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/integrations-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/notifications-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/patch-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/quickstarts-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/rbac-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/remediations-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/javascript-clients-shared | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/sources-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/topological-inventory-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/vulnerabilities-client | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/chrome | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/eslint-config-redhat-cloud-services | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-advisor-components | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-config | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-config-utilities | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-notifications | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-remediations | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-testing | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-translations | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/frontend-components-utilities | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/rule-components | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/tsc-transform-imports | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/types | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/hcc-feo-mcp | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/hcc-kessel-mcp | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @redhat-cloud-services/hcc-pf-mcp | npm | worm, credential_stealer, data_exfiltration, persistence | 2 | |
| npm @t-in-one/add_application | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 1 | |
| npm @capibar.chat/ui-kit | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 2 | |
| npm @sber-ecom-core/sberpay-widget | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 3 | |
| npm terminal-logger-utils | npm | credential_stealer, rat, c2_agent, data_exfiltration | 1 | |
| npm ts-logger-pack | npm | credential_stealer, rat, c2_agent, data_exfiltration | 1 | |
| npm pretty-logger-utils | npm | credential_stealer, rat, c2_agent, data_exfiltration | 1 | |
| npm pinno-loggers | npm | credential_stealer, rat, c2_agent, data_exfiltration | 1 | |
| npm polymarket-validator | npm | credential_stealer, data_exfiltration | 1 | |
| npm changelog-logger-utilities | npm | credential_stealer, data_exfiltration | 1 | |
| npm @cloudplatform-single-spa/billing | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 1 | |
| npm @mlspace/shared-storage | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 1 | |
| npm @car-loans/mobile-car-loans-application | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 1 | |
| npm @fb-deposit/form-deposit | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 1 | |
| npm @debit-ib/mobile-debit-ib-additional-card-form | npm | dependency_confusion, credential_stealer, data_exfiltration, c2_agent | 1 | |
| npm changiairportpromax | npm | other | 1 | |
| npm ilovefemboys | npm | other | 1 | |
| npm captainindia | npm | other | 1 | |
| npm backup1-gg | npm | other | 1 | |
| npm backupsitetuff6 | npm | other | 1 | |
| npm nottuff1 | npm | other | 1 | |
| npm abuden1 | npm | other | 1 | |
| npm ishowfeet1 | npm | other | 1 | |
| npm forge-jsxy | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent, crypto_drainer | 22 | |
| npm forge-jsx4 | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent, crypto_drainer | 2 | |
| npm pino-zod | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent, crypto_drainer | 2 | |
| npm zod-pino | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent, crypto_drainer | 4 | |
| npm polymarket-trading-cli | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-terminal | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-trade | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-auto-trade | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-copy-trading | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-bot | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-claude-code | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-ai-agent | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm polymarket-trader | npm | crypto_drainer, credential_stealer, data_exfiltration | 2 | |
| npm art-template | npm | crypto_drainer, other | 4 | |
| pypi durabletask | pypi | credential_stealer, data_exfiltration, worm | 1 | |
| npm ai-figure | npm | other | 2 | |
| npm amapcn | npm | other | 2 | |
| npm @antv/a8 | npm | credential_stealer | 2 | |
| npm @antv/adjust | npm | credential_stealer | 2 | |
| npm @antv/algorithm | npm | credential_stealer | 2 | |
| npm @antv/async-hook | npm | credential_stealer | 2 | |
| npm @antv/attr | npm | credential_stealer | 2 | |
| npm @antv/ava | npm | credential_stealer | 2 | |
| npm @antv/ava-react | npm | credential_stealer | 2 | |
| npm @antv/awards | npm | credential_stealer | 2 | |
| npm @antv/calendar-heatmap | npm | credential_stealer | 2 | |
| npm @antv/chart-linter | npm | credential_stealer | 2 | |
| npm @antv/chart-node-g6 | npm | credential_stealer | 2 | |
| npm @antv/chart-visualization-skills | npm | credential_stealer | 2 | |
| npm @antv/ckb | npm | credential_stealer | 2 | |
| npm @antv/color-schema | npm | credential_stealer | 2 | |
| npm @antv/color-util | npm | credential_stealer | 2 | |
| npm @antv/component | npm | credential_stealer | 2 | |
| npm @antv/coord | npm | credential_stealer | 2 | |
| npm @antv/d3-color | npm | credential_stealer | 2 | |
| npm @antv/d3-interpolate | npm | credential_stealer | 2 | |
| npm @antv/data-samples | npm | credential_stealer | 2 | |
| npm @antv/data-set | npm | credential_stealer | 2 | |
| npm @antv/data-wizard | npm | credential_stealer | 2 | |
| npm @antv/dipper-component | npm | credential_stealer | 2 | |
| npm @antv/dipper-hooks | npm | credential_stealer | 2 | |
| npm @antv/dipper-map | npm | credential_stealer | 2 | |
| npm @antv/dom-util | npm | credential_stealer | 2 | |
| npm @antv/dumi-theme-antv | npm | credential_stealer | 2 | |
| npm @antv/dw-analyzer | npm | credential_stealer | 2 | |
| npm @antv/dw-random | npm | credential_stealer | 2 | |
| npm @antv/dw-transform | npm | credential_stealer | 2 | |
| npm @antv/dw-util | npm | credential_stealer | 2 | |
| npm @antv/event-emitter | npm | credential_stealer | 2 | |
| npm @antv/expr | npm | credential_stealer | 2 | |
| npm @antv/f2 | npm | credential_stealer | 2 | |
| npm @antv/f2-algorithm | npm | credential_stealer | 2 | |
| npm @antv/f2-canvas | npm | credential_stealer | 2 | |
| npm @antv/f2-context | npm | credential_stealer | 2 | |
| npm @antv/f2-graphic | npm | credential_stealer | 2 | |
| npm @antv/f2-my | npm | credential_stealer | 2 | |
| npm @antv/f2-react | npm | credential_stealer | 2 | |
| npm @antv/f2-site | npm | credential_stealer | 2 | |
| npm @antv/f2-vue | npm | credential_stealer | 2 | |
| npm @antv/f2-wordcloud | npm | credential_stealer | 2 | |
| npm @antv/f2-wx | npm | credential_stealer | 2 | |
| npm @antv/f6 | npm | credential_stealer | 2 | |
| npm @antv/f6-alipay | npm | credential_stealer | 2 | |
| npm @antv/f6-core | npm | credential_stealer | 2 | |
| npm @antv/f6-element | npm | credential_stealer | 2 | |
| npm @antv/f6-hammerjs | npm | credential_stealer | 2 | |
| npm @antv/f6-plugin | npm | credential_stealer | 2 | |
| npm @antv/f6-ui | npm | credential_stealer | 2 | |
| npm @antv/f6-wx | npm | credential_stealer | 2 | |
| npm @antv/f-charts | npm | credential_stealer | 2 | |
| npm @antv/f-engine | npm | credential_stealer | 2 | |
| npm @antv/f-lottie | npm | credential_stealer | 2 | |
| npm @antv/f-my | npm | credential_stealer | 2 | |
| npm @antv/f-react | npm | credential_stealer | 2 | |
| npm @antv/f-test-utils | npm | credential_stealer | 2 | |
| npm @antv/f-vue | npm | credential_stealer | 2 | |
| npm @antv/f-wx | npm | credential_stealer | 2 | |
| npm @antv/g2 | npm | credential_stealer | 2 | |
| npm @antv/g2-brush | npm | credential_stealer | 2 | |
| npm @antv/g2-extension-3d | npm | credential_stealer | 2 | |
| npm @antv/g2-extension-ava | npm | credential_stealer | 2 | |
| npm @antv/g2-extension-plot | npm | credential_stealer | 2 | |
| npm @antv/g2plot | npm | credential_stealer | 2 | |
| npm @antv/g2plot-schemas | npm | credential_stealer | 2 | |
| npm @antv/g2-plugin-slider | npm | credential_stealer | 2 | |
| npm @antv/g2-ssr | npm | credential_stealer | 2 | |
| npm @antv/g | npm | credential_stealer | 2 | |
| npm @antv/g6 | npm | credential_stealer | 2 | |
| npm @antv/g6-alipay | npm | credential_stealer | 2 | |
| npm @antv/g6-cli | npm | credential_stealer | 2 | |
| npm @antv/g6-core | npm | credential_stealer | 2 | |
| npm @antv/g6-editor | npm | credential_stealer | 2 | |
| npm @antv/g6-element | npm | credential_stealer | 2 | |
| npm @antv/g6-extension-3d | npm | credential_stealer | 2 | |
| npm @antv/g6-extension-react | npm | credential_stealer | 2 | |
| npm @antv/g6-mobile | npm | credential_stealer | 2 | |
| npm @antv/g6-pc | npm | credential_stealer | 2 | |
| npm @antv/g6-plugin | npm | credential_stealer | 2 | |
| npm @antv/g6-plugin-map-view | npm | credential_stealer | 2 | |
| npm @antv/g6-plugins | npm | credential_stealer | 2 | |
| npm @antv/g6-react-node | npm | credential_stealer | 2 | |
| npm @antv/g6-ssr | npm | credential_stealer | 2 | |
| npm @antv/g6-wx | npm | credential_stealer | 2 | |
| npm @antv/gatsby-theme | npm | credential_stealer | 2 | |
| npm @antv/g-base | npm | credential_stealer | 2 | |
| npm @antv/g-camera-api | npm | credential_stealer | 2 | |
| npm @antv/g-canvas | npm | credential_stealer | 2 | |
| npm @antv/g-canvaskit | npm | credential_stealer | 2 | |
| npm @antv/g-compat | npm | credential_stealer | 2 | |
| npm @antv/g-components | npm | credential_stealer | 2 | |
| npm @antv/g-css-layout-api | npm | credential_stealer | 2 | |
| npm @antv/g-css-typed-om-api | npm | credential_stealer | 2 | |
| npm @antv/g-device-api | npm | credential_stealer | 2 | |
| npm @antv/g-dom-mutation-observer-api | npm | credential_stealer | 2 | |
| npm @antv/geo-coord | npm | credential_stealer | 2 | |
| npm @antv/g-gesture | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-advance | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-algorithm | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-basic | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-galaxybase | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-graphscope | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-hugegraph | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-janusgraph | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-neo4j | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-scene | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-tugraph | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-tugraph-analytics | npm | credential_stealer | 2 | |
| npm @antv/gi-assets-xlab | npm | credential_stealer | 2 | |
| npm @antv/gi-cli | npm | credential_stealer | 2 | |
| npm @antv/gi-common-components | npm | credential_stealer | 2 | |
| npm @antv/g-image-exporter | npm | credential_stealer | 2 | |
| npm @antv/gi-mock-data | npm | credential_stealer | 2 | |
| npm @antv/gi-public-data | npm | credential_stealer | 2 | |
| npm @antv/gi-sdk | npm | credential_stealer | 2 | |
| npm @antv/gi-sdk-app | npm | credential_stealer | 2 | |
| npm @antv/gi-theme-antd | npm | credential_stealer | 2 | |
| npm @antv/github-config-cli | npm | credential_stealer | 2 | |
| npm @antv/g-layout-blocklike | npm | credential_stealer | 2 | |
| npm @antv/g-lite | npm | credential_stealer | 2 | |
| npm @antv/gl-matrix | npm | credential_stealer | 2 | |
| npm @antv/g-lottie-player | npm | credential_stealer | 2 | |
| npm @antv/g-math | npm | credential_stealer | 2 | |
| npm @antv/g-mobile | npm | credential_stealer | 2 | |
| npm @antv/g-mobile-canvas | npm | credential_stealer | 2 | |
| npm @antv/g-mobile-canvas-element | npm | credential_stealer | 2 | |
| npm @antv/g-mobile-svg | npm | credential_stealer | 2 | |
| npm @antv/g-mobile-webgl | npm | credential_stealer | 2 | |
| npm @antv/g-pattern | npm | credential_stealer | 2 | |
| npm @antv/g-perf | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-3d | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-a11y | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-annotation | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-box2d | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-canvaskit-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-canvas-path-generator | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-canvas-picker | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-canvas-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-control | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-css-select | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-device-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-dom-interaction | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-dragndrop | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-gesture | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-gpgpu | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-html-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-image-loader | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-matterjs | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-mobile-interaction | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-physx | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-rough-canvas-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-rough-svg-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-svg-picker | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-svg-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-webgl-device | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-webgl-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-webgpu-device | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-yoga | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-zdog-canvas-renderer | npm | credential_stealer | 2 | |
| npm @antv/g-plugin-zdog-svg-renderer | npm | credential_stealer | 2 | |
| npm @antv/gpt-vis | npm | credential_stealer | 2 | |
| npm @antv/gpt-vis-ssr | npm | credential_stealer | 2 | |
| npm @antv/graphin | npm | credential_stealer | 2 | |
| npm @antv/graphin-components | npm | credential_stealer | 2 | |
| npm @antv/graphin-graphscope | npm | credential_stealer | 2 | |
| npm @antv/graphin-icons | npm | credential_stealer | 2 | |
| npm @antv/graphlib | npm | credential_stealer | 2 | |
| npm @antv/g-shader-components | npm | credential_stealer | 2 | |
| npm @antv/g-svg | npm | credential_stealer | 2 | |
| npm @antv/g-web-animations-api | npm | credential_stealer | 2 | |
| npm @antv/g-web-components | npm | credential_stealer | 2 | |
| npm @antv/g-webgl | npm | credential_stealer | 2 | |
| npm @antv/g-webgl-compute | npm | credential_stealer | 2 | |
| npm @antv/g-webgpu | npm | credential_stealer | 2 | |
| npm @antv/g-webgpu-compiler | npm | credential_stealer | 2 | |
| npm @antv/g-webgpu-core | npm | credential_stealer | 2 | |
| npm @antv/g-webgpu-engine | npm | credential_stealer | 2 | |
| npm @antv/g-webgpu-raytracer | npm | credential_stealer | 2 | |
| npm @antv/g-webgpu-unitchart | npm | credential_stealer | 2 | |
| npm @antv/hierarchy | npm | credential_stealer | 2 | |
| npm @antv/infographic | npm | credential_stealer | 2 | |
| npm @antv/insight-component | npm | credential_stealer | 2 | |
| npm @antv/interaction | npm | credential_stealer | 2 | |
| npm @antv/istanbul | npm | credential_stealer | 2 | |
| npm @antv/knowledge | npm | credential_stealer | 2 | |
| npm @antv/l7 | npm | credential_stealer | 2 | |
| npm @antv/l7-component | npm | credential_stealer | 2 | |
| npm @antv/l7-composite-layers | npm | credential_stealer | 2 | |
| npm @antv/l7-core | npm | credential_stealer | 2 | |
| npm @antv/l7-district | npm | credential_stealer | 2 | |
| npm @antv/l7-draw | npm | credential_stealer | 2 | |
| npm @antv/l7-editor | npm | credential_stealer | 2 | |
| npm @antv/l7-extension-g-layer | npm | credential_stealer | 2 | |
| npm @antv/l7-layers | npm | credential_stealer | 2 | |
| npm @antv/l7-leaflet | npm | credential_stealer | 2 | |
| npm @antv/l7-map | npm | credential_stealer | 2 | |
| npm @antv/l7-mapkit | npm | credential_stealer | 2 | |
| npm @antv/l7-maps | npm | credential_stealer | 2 | |
| npm @antv/l7-mini | npm | credential_stealer | 2 | |
| npm @antv/l7-pass | npm | credential_stealer | 2 | |
| npm @antv/l7plot | npm | credential_stealer | 2 | |
| npm @antv/l7plot-component | npm | credential_stealer | 2 | |
| npm @antv/l7-react | npm | credential_stealer | 2 | |
| npm @antv/l7-renderer | npm | credential_stealer | 2 | |
| npm @antv/l7-scene | npm | credential_stealer | 2 | |
| npm @antv/l7-source | npm | credential_stealer | 2 | |
| npm @antv/l7-three | npm | credential_stealer | 2 | |
| npm @antv/l7-utils | npm | credential_stealer | 2 | |
| npm @antv/larkmap | npm | credential_stealer | 2 | |
| npm @antv/layout-gpu | npm | credential_stealer | 2 | |
| npm @antv/layout-wasm | npm | credential_stealer | 2 | |
| npm @antv/li-aiearth-assets | npm | credential_stealer | 2 | |
| npm @antv/li-analysis-assets | npm | credential_stealer | 2 | |
| npm @antv/li-core-assets | npm | credential_stealer | 2 | |
| npm @antv/li-editor | npm | credential_stealer | 2 | |
| npm @antv/li-p2 | npm | credential_stealer | 2 | |
| npm @antv/li-sam-assets | npm | credential_stealer | 2 | |
| npm @antv/li-sdk | npm | credential_stealer | 2 | |
| npm @antv/lite-insight | npm | credential_stealer | 2 | |
| npm @antv/matrix-util | npm | credential_stealer | 2 | |
| npm @antv/mcp-server-antv | npm | credential_stealer | 2 | |
| npm @antv/mcp-server-chart | npm | credential_stealer | 2 | |
| npm @antv/my-f2 | npm | credential_stealer | 2 | |
| npm @antv/my-f2-pc | npm | credential_stealer | 2 | |
| npm @antv/narrative-text-editor | npm | credential_stealer | 2 | |
| npm @antv/narrative-text-schema | npm | credential_stealer | 2 | |
| npm @antv/narrative-text-vis | npm | credential_stealer | 2 | |
| npm @antv/path-util | npm | credential_stealer | 2 | |
| npm @antv/react-g | npm | credential_stealer | 2 | |
| npm @antv/s2 | npm | credential_stealer | 2 | |
| npm @antv/s2-react | npm | credential_stealer | 2 | |
| npm @antv/s2-react-components | npm | credential_stealer | 2 | |
| npm @antv/s2-ssr | npm | credential_stealer | 2 | |
| npm @antv/s2-vue | npm | credential_stealer | 2 | |
| npm @antv/sam | npm | credential_stealer | 2 | |
| npm @antv/scale | npm | credential_stealer | 2 | |
| npm @antv/semantic-release-pnpm | npm | credential_stealer | 2 | |
| npm @antv/smart-color | npm | credential_stealer | 2 | |
| npm @antv/stat | npm | credential_stealer | 2 | |
| npm @antv/t8 | npm | credential_stealer | 2 | |
| npm @antv/thumbnails | npm | credential_stealer | 2 | |
| npm @antv/thumbnails-component | npm | credential_stealer | 2 | |
| npm @antv/torch | npm | credential_stealer | 2 | |
| npm @antv/translator | npm | credential_stealer | 2 | |
| npm @antv/util | npm | credential_stealer | 2 | |
| npm @antv/vendor | npm | credential_stealer | 2 | |
| npm @antv/vis-predict-engine | npm | credential_stealer | 2 | |
| npm @antv/webgpu-graph | npm | credential_stealer | 2 | |
| npm @antv/word-scale-chart | npm | credential_stealer | 2 | |
| npm @antv/wx-f2 | npm | credential_stealer | 2 | |
| npm @antv/x6 | npm | credential_stealer | 2 | |
| npm @antv/x6-angular-shape | npm | credential_stealer | 2 | |
| npm @antv/x6-common | npm | credential_stealer | 2 | |
| npm @antv/x6-components | npm | credential_stealer | 2 | |
| npm @antv/x6-geometry | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-clipboard | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-dnd | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-export | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-history | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-keyboard | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-minimap | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-scroller | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-selection | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-snapline | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-stencil | npm | credential_stealer | 2 | |
| npm @antv/x6-plugin-transform | npm | credential_stealer | 2 | |
| npm @antv/x6-react | npm | credential_stealer | 2 | |
| npm @antv/x6-react-components | npm | credential_stealer | 2 | |
| npm @antv/x6-react-shape | npm | credential_stealer | 2 | |
| npm @antv/x6-vector | npm | credential_stealer | 2 | |
| npm @antv/x6-vue3-shape | npm | credential_stealer | 2 | |
| npm @antv/x6-vue-shape | npm | credential_stealer | 2 | |
| npm @antv/xflow | npm | credential_stealer | 2 | |
| npm @antv/xflow-core | npm | credential_stealer | 2 | |
| npm @antv/xflow-diff | npm | credential_stealer | 2 | |
| npm @antv/xflow-extension | npm | credential_stealer | 2 | |
| npm @antv/xflow-hook | npm | credential_stealer | 2 | |
| npm ast-plugin | npm | other | 2 | |
| npm babel-plugin-version | npm | other | 2 | |
| npm boring-avatars-vanilla | npm | other | 2 | |
| npm byte-parser | npm | other | 2 | |
| npm canvas-nest.js | npm | other | 2 | |
| npm echarts-for-react | npm | other | 3 | |
| npm filesize.js | npm | other | 2 | |
| npm fixed-round | npm | other | 2 | |
| npm gantt-for-react | npm | other | 2 | |
| npm jest-canvas-mock | npm | other | 3 | |
| npm jest-date-mock | npm | other | 3 | |
| npm jest-electron | npm | other | 2 | |
| npm jest-expect | npm | other | 2 | |
| npm jest-less-loader | npm | other | 2 | |
| npm jest-random-mock | npm | other | 2 | |
| npm jest-url-loader | npm | other | 2 | |
| npm limit-size | npm | other | 2 | |
| npm lint-md | npm | other | 2 | |
| npm lint-md-cli | npm | other | 2 | |
| npm @lint-md/cli | npm | other | 2 | |
| npm @lint-md/core | npm | other | 2 | |
| npm @lint-md/parser | npm | other | 2 | |
| npm mcp-echarts | npm | other | 2 | |
| npm mcp-mermaid | npm | other | 2 | |
| npm miz | npm | other | 2 | |
| npm onfire.js | npm | other | 2 | |
| npm react-adsense | npm | other | 2 | |
| npm relationship.js | npm | other | 2 | |
| npm ribbon.js | npm | other | 1 | |
| npm size-sensor | npm | other | 3 | |
| npm slice.js | npm | other | 2 | |
| npm timeago.js | npm | other | 2 | |
| npm timeago-react | npm | other | 2 | |
| npm uri-parse | npm | other | 2 | |
| npm word-width | npm | other | 2 | |
| npm xmorse | npm | other | 2 | |
| npm node-ipc | npm | credential_stealer, data_exfiltration, rat, persistence | 3 | |
| npm iceberg-javascript | npm | rat, persistence | 1 | |
| npm supabase-javascript | npm | rat, persistence | 1 | |
| npm auth-javascript | npm | rat, persistence | 1 | |
| npm microsoft-applicationinsights-common | npm | rat, persistence | 1 | |
| npm ms-graph-types | npm | rat, persistence | 1 | |
| npm @beproduct/nestjs-auth | npm | other | 18 | |
| npm @dirigible-ai/sdk | npm | other | 2 | |
| npm @draftauth/client | npm | other | 2 | |
| npm @draftauth/core | npm | other | 2 | |
| npm @draftlab/auth | npm | other | 2 | |
| npm @draftlab/auth-router | npm | other | 2 | |
| npm @draftlab/db | npm | other | 2 | |
| npm @mesadev/rest | npm | other | 1 | |
| npm @mesadev/saguaro | npm | other | 1 | |
| npm @mesadev/sdk | npm | other | 1 | |
| npm @mistralai/mistralai | npm | other | 3 | |
| npm @mistralai/mistralai-azure | npm | other | 3 | |
| npm @mistralai/mistralai-gcp | npm | other | 3 | |
| npm @ml-toolkit-ts/preprocessing | npm | other | 2 | |
| npm @ml-toolkit-ts/xgboost | npm | other | 2 | |
| npm @opensearch-project/opensearch | npm | other | 4 | |
| npm @squawk/airport-data | npm | other | 5 | |
| npm @squawk/airports | npm | other | 5 | |
| npm @squawk/airspace | npm | other | 5 | |
| npm @squawk/airspace-data | npm | other | 5 | |
| npm @squawk/airway-data | npm | other | 5 | |
| npm @squawk/airways | npm | other | 5 | |
| npm @squawk/fix-data | npm | other | 5 | |
| npm @squawk/fixes | npm | other | 5 | |
| npm @squawk/flight-math | npm | other | 5 | |
| npm @squawk/flightplan | npm | other | 5 | |
| npm @squawk/geo | npm | other | 5 | |
| npm @squawk/icao-registry | npm | other | 5 | |
| npm @squawk/icao-registry-data | npm | other | 5 | |
| npm @squawk/mcp | npm | other | 5 | |
| npm @squawk/navaid-data | npm | other | 5 | |
| npm @squawk/navaids | npm | other | 5 | |
| npm @squawk/notams | npm | other | 5 | |
| npm @squawk/procedure-data | npm | other | 5 | |
| npm @squawk/procedures | npm | other | 5 | |
| npm @squawk/types | npm | other | 5 | |
| npm @squawk/units | npm | other | 5 | |
| npm @squawk/weather | npm | other | 5 | |
| npm @supersurkhet/cli | npm | other | 6 | |
| npm @supersurkhet/sdk | npm | other | 6 | |
| npm @tallyui/components | npm | other | 3 | |
| npm @tallyui/connector-medusa | npm | other | 3 | |
| npm @tallyui/connector-shopify | npm | other | 3 | |
| npm @tallyui/connector-vendure | npm | other | 3 | |
| npm @tallyui/connector-woocommerce | npm | other | 3 | |
| npm @tallyui/core | npm | other | 3 | |
| npm @tallyui/database | npm | other | 3 | |
| npm @tallyui/pos | npm | other | 3 | |
| npm @tallyui/storage-sqlite | npm | other | 3 | |
| npm @tallyui/theme | npm | other | 3 | |
| npm @tanstack/arktype-adapter | npm | credential_stealer | 2 | |
| npm @tanstack/eslint-plugin-router | npm | credential_stealer | 2 | |
| npm @tanstack/eslint-plugin-start | npm | credential_stealer | 2 | |
| npm @tanstack/history | npm | credential_stealer | 2 | |
| npm @tanstack/nitro-v2-vite-plugin | npm | credential_stealer | 2 | |
| npm @tanstack/react-router | npm | credential_stealer | 2 | |
| npm @tanstack/react-router-devtools | npm | credential_stealer | 2 | |
| npm @tanstack/react-router-ssr-query | npm | credential_stealer | 2 | |
| npm @tanstack/react-start | npm | credential_stealer | 2 | |
| npm @tanstack/react-start-client | npm | credential_stealer | 2 | |
| npm @tanstack/react-start-rsc | npm | credential_stealer | 2 | |
| npm @tanstack/react-start-server | npm | credential_stealer | 2 | |
| npm @tanstack/router-cli | npm | credential_stealer | 2 | |
| npm @tanstack/router-core | npm | credential_stealer | 2 | |
| npm @tanstack/router-devtools | npm | credential_stealer | 2 | |
| npm @tanstack/router-devtools-core | npm | credential_stealer | 2 | |
| npm @tanstack/router-generator | npm | credential_stealer | 2 | |
| npm @tanstack/router-plugin | npm | credential_stealer | 2 | |
| npm @tanstack/router-ssr-query-core | npm | credential_stealer | 2 | |
| npm @tanstack/router-utils | npm | credential_stealer | 2 | |
| npm @tanstack/router-vite-plugin | npm | credential_stealer | 2 | |
| npm @tanstack/solid-router | npm | credential_stealer | 2 | |
| npm @tanstack/solid-router-devtools | npm | credential_stealer | 2 | |
| npm @tanstack/solid-router-ssr-query | npm | credential_stealer | 2 | |
| npm @tanstack/solid-start | npm | credential_stealer | 2 | |
| npm @tanstack/solid-start-client | npm | credential_stealer | 2 | |
| npm @tanstack/solid-start-server | npm | credential_stealer | 2 | |
| npm @tanstack/start-client-core | npm | credential_stealer | 2 | |
| npm @tanstack/start-fn-stubs | npm | credential_stealer | 2 | |
| npm @tanstack/start-plugin-core | npm | credential_stealer | 2 | |
| npm @tanstack/start-server-core | npm | credential_stealer | 2 | |
| npm @tanstack/start-static-server-functions | npm | credential_stealer | 2 | |
| npm @tanstack/start-storage-context | npm | credential_stealer | 2 | |
| npm @tanstack/valibot-adapter | npm | credential_stealer | 2 | |
| npm @tanstack/virtual-file-routes | npm | credential_stealer | 2 | |
| npm @tanstack/vue-router | npm | credential_stealer | 2 | |
| npm @tanstack/vue-router-devtools | npm | credential_stealer | 2 | |
| npm @tanstack/vue-router-ssr-query | npm | credential_stealer | 2 | |
| npm @tanstack/vue-start | npm | credential_stealer | 2 | |
| npm @tanstack/vue-start-client | npm | credential_stealer | 2 | |
| npm @tanstack/vue-start-server | npm | credential_stealer | 2 | |
| npm @tanstack/zod-adapter | npm | credential_stealer | 2 | |
| npm @taskflow-corp/cli | npm | other | 6 | |
| npm @tolka/cli | npm | other | 5 | |
| npm @uipath/access-policy-sdk | npm | other | 1 | |
| npm @uipath/access-policy-tool | npm | other | 1 | |
| npm @uipath/admin-tool | npm | other | 1 | |
| npm @uipath/agent-sdk | npm | other | 1 | |
| npm @uipath/agent-tool | npm | other | 1 | |
| npm @uipath/agent.sdk | npm | other | 1 | |
| npm @uipath/aops-policy-tool | npm | other | 1 | |
| npm @uipath/ap-chat | npm | other | 1 | |
| npm @uipath/api-workflow-tool | npm | other | 1 | |
| npm @uipath/apollo-core | npm | other | 1 | |
| npm @uipath/apollo-react | npm | other | 1 | |
| npm @uipath/apollo-wind | npm | other | 1 | |
| npm @uipath/auth | npm | other | 1 | |
| npm @uipath/case-tool | npm | other | 1 | |
| npm @uipath/cli | npm | other | 1 | |
| npm @uipath/codedagent-tool | npm | other | 1 | |
| npm @uipath/codedagents-tool | npm | other | 1 | |
| npm @uipath/codedapp-tool | npm | other | 1 | |
| npm @uipath/common | npm | other | 1 | |
| npm @uipath/context-grounding-tool | npm | other | 1 | |
| npm @uipath/data-fabric-tool | npm | other | 1 | |
| npm @uipath/docsai-tool | npm | other | 1 | |
| npm @uipath/filesystem | npm | other | 1 | |
| npm @uipath/flow-tool | npm | other | 1 | |
| npm @uipath/functions-tool | npm | other | 1 | |
| npm @uipath/gov-tool | npm | other | 1 | |
| npm @uipath/identity-tool | npm | other | 1 | |
| npm @uipath/insights-sdk | npm | other | 1 | |
| npm @uipath/insights-tool | npm | other | 1 | |
| npm @uipath/integrationservice-sdk | npm | other | 1 | |
| npm @uipath/integrationservice-tool | npm | other | 1 | |
| npm @uipath/llmgw-tool | npm | other | 1 | |
| npm @uipath/maestro-sdk | npm | other | 1 | |
| npm @uipath/maestro-tool | npm | other | 1 | |
| npm @uipath/orchestrator-tool | npm | other | 1 | |
| npm @uipath/packager-tool-apiworkflow | npm | other | 1 | |
| npm @uipath/packager-tool-bpmn | npm | other | 1 | |
| npm @uipath/packager-tool-case | npm | other | 1 | |
| npm @uipath/packager-tool-connector | npm | other | 1 | |
| npm @uipath/packager-tool-flow | npm | other | 1 | |
| npm @uipath/packager-tool-functions | npm | other | 1 | |
| npm @uipath/packager-tool-webapp | npm | other | 1 | |
| npm @uipath/packager-tool-workflowcompiler | npm | other | 1 | |
| npm @uipath/packager-tool-workflowcompiler-browser | npm | other | 1 | |
| npm @uipath/platform-tool | npm | other | 1 | |
| npm @uipath/project-packager | npm | other | 1 | |
| npm @uipath/resource-tool | npm | other | 1 | |
| npm @uipath/resourcecatalog-tool | npm | other | 1 | |
| npm @uipath/resources-tool | npm | other | 1 | |
| npm @uipath/robot | npm | other | 1 | |
| npm @uipath/rpa-legacy-tool | npm | other | 1 | |
| npm @uipath/rpa-tool | npm | other | 1 | |
| npm @uipath/solution-packager | npm | other | 1 | |
| npm @uipath/solution-tool | npm | other | 1 | |
| npm @uipath/solutionpackager-sdk | npm | other | 1 | |
| npm @uipath/solutionpackager-tool-core | npm | other | 1 | |
| npm @uipath/tasks-tool | npm | other | 1 | |
| npm @uipath/telemetry | npm | other | 1 | |
| npm @uipath/test-manager-tool | npm | other | 1 | |
| npm @uipath/tool-workflowcompiler | npm | other | 1 | |
| npm @uipath/traces-tool | npm | other | 1 | |
| npm @uipath/ui-widgets-multi-file-upload | npm | other | 1 | |
| npm @uipath/uipath-python-bridge | npm | other | 1 | |
| npm @uipath/vertical-solutions-tool | npm | other | 1 | |
| npm @uipath/vss | npm | other | 1 | |
| npm @uipath/widget.sdk | npm | other | 1 | |
| npm agentwork-cli | npm | other | 2 | |
| npm cmux-agent-mcp | npm | other | 6 | |
| npm cross-stitch | npm | other | 5 | |
| npm git-branch-selector | npm | other | 5 | |
| npm git-git-git | npm | other | 5 | |
| npm ml-toolkit-ts | npm | other | 2 | |
| npm nextmove-mcp | npm | other | 5 | |
| npm safe-action | npm | other | 2 | |
| npm ts-dna | npm | other | 5 | |
| npm wot-api | npm | other | 4 | |
| pypi guardrails-ai | pypi | other | 1 | |
| pypi mistralai | pypi | other | 1 | |
| npm noon-contracts | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, crypto_drainer | 1 | |
| npm martinez-polygon-clipping-tony | npm | rat, persistence | 1 | |
| npm common-tg-service | npm | credential_stealer, data_exfiltration, c2_agent | 2 | |
| npm ams-ssk | npm | c2_agent | 2 | |
| npm node-env-resolve | npm | credential_stealer, data_exfiltration, rat, persistence | 1 | |
| npm exiouss | npm | credential_stealer, data_exfiltration, rat, persistence | 1 | |
| pypi pytorch-lightning | pypi | credential_stealer, data_exfiltration, worm | 1 | |
| npm @cap-js/sqlite | npm | credential_stealer, data_exfiltration, worm | 1 | |
| npm @cap-js/postgres | npm | credential_stealer, data_exfiltration, worm | 1 | |
| npm @cap-js/db-service | npm | credential_stealer, data_exfiltration, worm | 1 | |
| npm mbt | npm | credential_stealer, data_exfiltration, worm | 1 | |
| npm npm-global-util | npm | credential_stealer, data_exfiltration, rat, persistence | 1 | |
| npm redeem-onchain-sdk | npm | crypto_drainer | 1 | |
| npm @bitwarden/cli | npm | other | 1 | |
| npm ixpresso-core | npm | rat, credential_stealer, crypto_drainer, data_exfiltration, persistence, c2_agent | 3 | |
| npm godsplan | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent | 7 | |
| npm eyevox | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent | 8 | |
| npm forge-jsx | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent | 67 | |
| npm @johntaohunter/forge-jsx | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent | 1 | |
| npm js-logger-pack | npm | credential_stealer, crypto_drainer, data_exfiltration, persistence, c2_agent | 22 | |
| npm dom-utils-lite | npm | persistence, data_exfiltration, c2_agent | 1 | |
| npm centralogger | npm | persistence, data_exfiltration, c2_agent | 5 | |
| npm @genoma-ui/components | npm | c2_agent, dependency_confusion | 1 | |
| npm rrweb-v1 | npm | c2_agent, dependency_confusion | 1 | |
| npm @needl-ai/common | npm | c2_agent, dependency_confusion | 1 | |
| npm sjs-biginteger | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm sjs-lint-build1 | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm bjs-biginteger | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm bjs-lint-builder | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm bjs-lint-builders | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm cjs-biginteger | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm ts-lint-builds | npm | credential_stealer, data_exfiltration, rat, persistence, c2_agent, typosquat | 1 | |
| npm @fairwords/websocket | npm | credential_stealer, crypto_drainer, data_exfiltration, worm | 2 | |
| npm @fairwords/loopback-connector-es | npm | credential_stealer, crypto_drainer, data_exfiltration, worm | 2 | |
| npm @fairwords/encryption | npm | credential_stealer, crypto_drainer, data_exfiltration, worm | 2 | |
| npm @velora-dex/sdk | npm | rat, persistence, crypto_drainer | 1 | |
| pypi hermes-px | pypi | credential_stealer, data_exfiltration | 1 | |
| npm mgc | npm | rat, credential_stealer, data_exfiltration, persistence, c2_agent | 4 | |
| npm strapi-plugin-cron | npm | c2_agent | 1 | |
| npm strapi-plugin-config | npm | c2_agent | 1 | |
| npm strapi-plugin-server | npm | c2_agent | 1 | |
| npm strapi-plugin-database | npm | c2_agent | 1 | |
| npm strapi-plugin-core | npm | c2_agent | 1 | |
| npm strapi-plugin-hooks | npm | c2_agent | 1 | |
| npm strapi-plugin-monitor | npm | c2_agent | 1 | |
| npm strapi-plugin-events | npm | c2_agent | 1 | |
| npm strapi-plugin-logger | npm | c2_agent | 1 | |
| npm strapi-plugin-health | npm | c2_agent | 1 | |
| npm strapi-plugin-sync | npm | c2_agent | 1 | |
| npm strapi-plugin-seed | npm | c2_agent | 1 | |
| npm strapi-plugin-locale | npm | c2_agent | 1 | |
| npm strapi-plugin-form | npm | c2_agent | 1 | |
| npm strapi-plugin-notify | npm | c2_agent | 1 | |
| npm strapi-plugin-api | npm | c2_agent | 2 | |
| npm strapi-plugin-sitemap-gen | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-tools | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-sync | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-cms | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-api | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-recon | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-stage | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-vhost | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-deep | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica-lite | npm | c2_agent | 1 | |
| npm strapi-plugin-nordica | npm | c2_agent | 1 | |
| npm strapi-plugin-finseven | npm | c2_agent | 1 | |
| npm strapi-plugin-hextest | npm | c2_agent | 1 | |
| npm strapi-plugin-cms-tools | npm | c2_agent | 1 | |
| npm strapi-plugin-content-sync | npm | c2_agent | 1 | |
| npm strapi-plugin-debug-tools | npm | c2_agent | 1 | |
| npm strapi-plugin-health-check | npm | c2_agent | 1 | |
| npm strapi-plugin-guardarian-ext | npm | c2_agent | 1 | |
| npm strapi-plugin-advanced-uuid | npm | c2_agent | 1 | |
| npm strapi-plugin-blurhash | npm | c2_agent | 1 | |
| npm express-session-js | npm | rat, credential_stealer, crypto_drainer, data_exfiltration, c2_agent | 1 | |
| npm axios | npm | rat, persistence | 1 | |
| pypi telnyx | pypi | credential_stealer, data_exfiltration | 1 | |
| pypi litellm | pypi | credential_stealer, data_exfiltration, rat, persistence | 1 | |
| npm oc-aa-module-client | npm | credential_stealer, data_exfiltration, rat, persistence, dependency_confusion | 1 | |
| npm @wame/ngx-adfs | npm | credential_stealer, data_exfiltration, rat, persistence, dependency_confusion | 1 | |
| npm @the-coca-cola-company/ngps-global-common-utils | npm | credential_stealer, data_exfiltration, rat, persistence, dependency_confusion | 1 | |
| npm cr-static-shared-components | npm | credential_stealer, data_exfiltration, rat, persistence, dependency_confusion | 1 | |
| npm @ceeferenderer/fe-renderer-sdk | npm | credential_stealer, data_exfiltration, rat, persistence, dependency_confusion | 1 | |
| npm react-refresh-update | npm | credential_stealer, data_exfiltration, typosquat | 6 | |
| npm pino-sdk-v2 | npm | credential_stealer, data_exfiltration, typosquat | 1 | |
| npm @Schedaero/shared | npm | credential_stealer, data_exfiltration, rat, persistence, dependency_confusion | 1 | |
| npm @zapier/zapier-sdk | npm | credential_stealer, data_exfiltration, worm, persistence | 3 | |
| npm @asyncapi/specs | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @quick-start-soft/quick-markdown-print | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @quick-start-soft/quick-markdown | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @quick-start-soft/quick-remove-image-background | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @quick-start-soft/quick-git-clean-markdown | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @quick-start-soft/quick-document-translator | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @quick-start-soft/quick-markdown-image | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @quick-start-soft/quick-task-refine | npm | credential_stealer, data_exfiltration, worm, persistence | 1 | |
| npm @asyncapi/modelina | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm posthog-react-native | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm posthog-node | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/secret-scanner-wasm | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/csv-parse | npm | credential_stealer, data_exfiltration, worm, persistence | 3 | |
| npm @postman/node-keytar | npm | credential_stealer, data_exfiltration, worm, persistence | 4 | |
| npm @postman/tunnel-agent | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/wdio-allure-reporter | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/postman-mcp-cli | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/mcp-ui-client | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/wdio-junit-reporter | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/pm-bin-macos-arm64 | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/pm-bin-linux-x64 | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm @postman/aether-icons | npm | credential_stealer, data_exfiltration, worm, persistence | 2 | |
| npm hyatt-residential-roster | npm | typosquat | 1 | |
| npm hyatt-album | npm | typosquat | 1 | |
| npm hyatt-avatar | npm | typosquat | 1 | |
| npm @ctrl/tinycolor | npm | credential_stealer, data_exfiltration | 1 | |
| npm ansi-styles | npm | crypto_drainer | 1 | |
| npm debug | npm | crypto_drainer | 1 | |
| npm chalk | npm | crypto_drainer | 1 | |
| npm supports-color | npm | crypto_drainer | 1 | |
| npm strip-ansi | npm | crypto_drainer | 1 | |
| npm ansi-regex | npm | crypto_drainer | 1 | |
| npm wrap-ansi | npm | crypto_drainer | 1 | |
| npm color-convert | npm | crypto_drainer | 1 | |
| npm color-name | npm | crypto_drainer | 1 | |
| npm is-arrayish | npm | crypto_drainer | 1 | |
| npm slice-ansi | npm | crypto_drainer | 1 | |
| npm error-ex | npm | crypto_drainer | 1 | |
| npm color-string | npm | crypto_drainer | 1 | |
| npm simple-swizzle | npm | crypto_drainer | 1 | |
| npm supports-hyperlinks | npm | crypto_drainer | 1 | |
| npm has-ansi | npm | crypto_drainer | 1 | |
| npm chalk-template | npm | crypto_drainer | 1 | |
| npm backslash | npm | crypto_drainer | 1 | |
| npm nx | npm | credential_stealer, data_exfiltration, wiper | 1 | |
| npm @nx/js | npm | credential_stealer, data_exfiltration, wiper | 1 | |
| npm tensorflowjs | npm | typosquat | 1 | |
| pypi bitensor | pypi | credential_stealer, data_exfiltration, rat, persistence, crypto_drainer, typosquat | 2 | |
| pypi bittenso-cli | pypi | credential_stealer, data_exfiltration, rat, persistence, crypto_drainer, typosquat | 1 | |
| pypi qbittensor | pypi | credential_stealer, data_exfiltration, rat, persistence, crypto_drainer, typosquat | 1 | |
| pypi bittenso | pypi | credential_stealer, data_exfiltration, rat, persistence, crypto_drainer, typosquat | 1 | |
| npm eslint-config-prettier | npm | other | 4 | |
| npm eslint-plugin-prettier | npm | other | 2 | |
| npm snyckit | npm | other | 1 | |
| npm @pkgr/core | npm | other | 1 | |
| npm napi-postinstall | npm | other | 1 | |
| npm express-cookie-parser | npm | typosquat | 1 | |
| npm slf4j-api-js | npm | typosquat | 1 | |
| npm nyc-config | npm | typosquat | 1 | |
| npm chrome-api-utils | npm | rat, persistence, dependency_confusion, typosquat | 1 | |
| npm grafana-sentry-datasource | npm | rat, persistence, dependency_confusion, typosquat | 1 | |
| npm @patternfly-v5/patternfly | npm | rat, persistence, dependency_confusion, typosquat | 1 | |
| npm electron-builder-13 | npm | rat, persistence, dependency_confusion, typosquat | 1 | |
| npm graphql.vscode-graphql-syntax | npm | rat, persistence, dependency_confusion, typosquat | 1 | |
| npm mattermost-cloudnative-bootstrapper | npm | rat, persistence, dependency_confusion, typosquat | 1 | |
| npm themes-vendor | npm | typosquat | 2 | |
| npm x509-escaping | npm | typosquat | 2 | |
| npm keycloak-server | npm | typosquat | 2 | |
| npm module-stub | npm | typosquat | 1 | |
| npm postject-copy | npm | typosquat | 1 | |
| npm micrometer-docs | npm | typosquat | 1 | |
| npm orbit-playroom | npm | typosquat | 1 | |
| npm weekendfe | npm | typosquat | 1 | |
| npm llm-oracle | npm | other | 1 | |
| npm redis-oracle | npm | other | 1 |
