Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npm@redhat-cloud-services/frontend-components-translations | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/frontend-components-utilities | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/rule-components | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/tsc-transform-imports | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/types | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/hcc-feo-mcp | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/hcc-kessel-mcp | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@redhat-cloud-services/hcc-pf-mcp | worm, credential stealer, data exfiltration, persistence | 2 | |
| npm@t-in-one/add_application | dependency confusion, credential stealer, data exfiltration, c2 agent | 1 | |
| npm@capibar.chat/ui-kit | dependency confusion, credential stealer, data exfiltration, c2 agent | 2 | |
| npm@sber-ecom-core/sberpay-widget | dependency confusion, credential stealer, data exfiltration, c2 agent | 3 | |
| npmterminal-logger-utils | credential stealer, rat, c2 agent, data exfiltration | 1 | |
| npmts-logger-pack | credential stealer, rat, c2 agent, data exfiltration | 1 | |
| npmpretty-logger-utils | credential stealer, rat, c2 agent, data exfiltration | 1 | |
| npmpinno-loggers | credential stealer, rat, c2 agent, data exfiltration | 1 | |
| npmpolymarket-validator | credential stealer, data exfiltration | 1 | |
| npmchangelog-logger-utilities | credential stealer, data exfiltration | 1 | |
| npm@cloudplatform-single-spa/billing | dependency confusion, credential stealer, data exfiltration, c2 agent | 1 | |
| npm@mlspace/shared-storage | dependency confusion, credential stealer, data exfiltration, c2 agent | 1 | |
| npm@car-loans/mobile-car-loans-application | dependency confusion, credential stealer, data exfiltration, c2 agent | 1 | |
| npm@fb-deposit/form-deposit | dependency confusion, credential stealer, data exfiltration, c2 agent | 1 | |
| npm@debit-ib/mobile-debit-ib-additional-card-form | dependency confusion, credential stealer, data exfiltration, c2 agent | 1 | |
| npmchangiairportpromax | other | 1 | |
| npmilovefemboys | other | 1 | |
| npmcaptainindia | other | 1 | |
| npmbackup1-gg | other | 1 | |
| npmbackupsitetuff6 | other | 1 | |
| npmnottuff1 | other | 1 | |
| npmabuden1 | other | 1 | |
| npmishowfeet1 | other | 1 | |
| npmforge-jsxy | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 22 | |
| npmforge-jsx4 | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 2 | |
| npmpino-zod | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 2 | |
| npmzod-pino | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 4 | |
| npmcompose-logger-stand | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 1 | |
| npmzod-pino434 | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 2 | |
| npmzod-pino444 | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 4 | |
| npmzredis-typed | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 1 | |
| npmpinokio-redis | rat, credential stealer, data exfiltration, persistence, c2 agent, crypto drainer | 1 | |
| npmpolymarket-trading-cli | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-terminal | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-trade | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-auto-trade | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-copy-trading | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-bot | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-claude-code | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-ai-agent | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmpolymarket-trader | crypto drainer, credential stealer, data exfiltration | 2 | |
| npmart-template | crypto drainer, other | 4 | |
| pypidurabletask | credential stealer, data exfiltration, worm | 1 |