Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npmexiouss | credential stealer, data exfiltration, rat, persistence | 1 | |
| pypipytorch-lightning | credential stealer, data exfiltration, worm | 1 | |
| npm@cap-js/sqlite | credential stealer, data exfiltration, worm | 1 | |
| npm@cap-js/postgres | credential stealer, data exfiltration, worm | 1 | |
| npm@cap-js/db-service | credential stealer, data exfiltration, worm | 1 | |
| npmmbt | credential stealer, data exfiltration, worm | 1 | |
| npmnpm-global-util | credential stealer, data exfiltration, rat, persistence | 1 | |
| npmredeem-onchain-sdk | crypto drainer | 1 | |
| npm@bitwarden/cli | other | 1 | |
| npmixpresso-core | rat, credential stealer, crypto drainer, data exfiltration, persistence, c2 agent | 3 | |
| npmgodsplan | rat, credential stealer, data exfiltration, persistence, c2 agent | 7 | |
| npmeyevox | rat, credential stealer, data exfiltration, persistence, c2 agent | 8 | |
| npmforge-jsx | rat, credential stealer, data exfiltration, persistence, c2 agent | 67 | |
| npm@johntaohunter/forge-jsx | rat, credential stealer, data exfiltration, persistence, c2 agent | 1 | |
| npmjs-logger-pack | credential stealer, crypto drainer, data exfiltration, persistence, c2 agent, rat | 22 | |
| npmdom-utils-lite | persistence, data exfiltration, c2 agent | 1 | |
| npmcentralogger | persistence, data exfiltration, c2 agent | 5 | |
| npm@genoma-ui/components | c2 agent, dependency confusion | 1 | |
| npmrrweb-v1 | c2 agent, dependency confusion | 1 | |
| npm@needl-ai/common | c2 agent, dependency confusion | 1 | |
| npmsjs-biginteger | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npmsjs-lint-build1 | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npmbjs-biginteger | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npmbjs-lint-builder | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npmbjs-lint-builders | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npmcjs-biginteger | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npmts-lint-builds | credential stealer, data exfiltration, rat, persistence, c2 agent, typosquat | 1 | |
| npm@fairwords/websocket | credential stealer, crypto drainer, data exfiltration, worm | 2 | |
| npm@fairwords/loopback-connector-es | credential stealer, crypto drainer, data exfiltration, worm | 2 | |
| npm@fairwords/encryption | credential stealer, crypto drainer, data exfiltration, worm | 2 | |
| npm@velora-dex/sdk | rat, persistence, crypto drainer | 1 | |
| pypihermes-px | credential stealer, data exfiltration | 1 | |
| npmmgc | rat, credential stealer, data exfiltration, persistence, c2 agent | 4 | |
| npmstrapi-plugin-cron | c2 agent | 1 | |
| npmstrapi-plugin-config | c2 agent | 1 | |
| npmstrapi-plugin-server | c2 agent | 1 | |
| npmstrapi-plugin-database | c2 agent | 1 | |
| npmstrapi-plugin-core | c2 agent | 1 | |
| npmstrapi-plugin-hooks | c2 agent | 1 | |
| npmstrapi-plugin-monitor | c2 agent | 1 | |
| npmstrapi-plugin-events | c2 agent | 1 | |
| npmstrapi-plugin-logger | c2 agent | 1 | |
| npmstrapi-plugin-health | c2 agent | 1 | |
| npmstrapi-plugin-sync | c2 agent | 1 | |
| npmstrapi-plugin-seed | c2 agent | 1 | |
| npmstrapi-plugin-locale | c2 agent | 1 | |
| npmstrapi-plugin-form | c2 agent | 1 | |
| npmstrapi-plugin-notify | c2 agent | 1 | |
| npmstrapi-plugin-api | c2 agent | 2 | |
| npmstrapi-plugin-sitemap-gen | c2 agent | 1 |