Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npmstrapi-plugin-nordica-tools | c2 agent | 1 | |
| npmstrapi-plugin-nordica-sync | c2 agent | 1 | |
| npmstrapi-plugin-nordica-cms | c2 agent | 1 | |
| npmstrapi-plugin-nordica-api | c2 agent | 1 | |
| npmstrapi-plugin-nordica-recon | c2 agent | 1 | |
| npmstrapi-plugin-nordica-stage | c2 agent | 1 | |
| npmstrapi-plugin-nordica-vhost | c2 agent | 1 | |
| npmstrapi-plugin-nordica-deep | c2 agent | 1 | |
| npmstrapi-plugin-nordica-lite | c2 agent | 1 | |
| npmstrapi-plugin-nordica | c2 agent | 1 | |
| npmstrapi-plugin-finseven | c2 agent | 1 | |
| npmstrapi-plugin-hextest | c2 agent | 1 | |
| npmstrapi-plugin-cms-tools | c2 agent | 1 | |
| npmstrapi-plugin-content-sync | c2 agent | 1 | |
| npmstrapi-plugin-debug-tools | c2 agent | 1 | |
| npmstrapi-plugin-health-check | c2 agent | 1 | |
| npmstrapi-plugin-guardarian-ext | c2 agent | 1 | |
| npmstrapi-plugin-advanced-uuid | c2 agent | 1 | |
| npmstrapi-plugin-blurhash | c2 agent | 1 | |
| npmexpress-session-js | rat, credential stealer, crypto drainer, data exfiltration, c2 agent | 1 | |
| npmaxios | rat, persistence | 1 | |
| pypitelnyx | credential stealer, data exfiltration | 1 | |
| pypilitellm | credential stealer, data exfiltration, rat, persistence | 1 | |
| npmoc-aa-module-client | credential stealer, data exfiltration, rat, persistence, dependency confusion | 1 | |
| npm@wame/ngx-adfs | credential stealer, data exfiltration, rat, persistence, dependency confusion | 1 | |
| npm@the-coca-cola-company/ngps-global-common-utils | credential stealer, data exfiltration, rat, persistence, dependency confusion | 1 | |
| npmcr-static-shared-components | credential stealer, data exfiltration, rat, persistence, dependency confusion | 1 | |
| npm@ceeferenderer/fe-renderer-sdk | credential stealer, data exfiltration, rat, persistence, dependency confusion | 1 | |
| npmreact-refresh-update | credential stealer, data exfiltration, typosquat | 6 | |
| npmpino-sdk-v2 | credential stealer, data exfiltration, typosquat | 1 | |
| npm@Schedaero/shared | credential stealer, data exfiltration, rat, persistence, dependency confusion | 1 | |
| npm@zapier/zapier-sdk | credential stealer, data exfiltration, worm, persistence | 3 | |
| npm@asyncapi/specs | credential stealer, data exfiltration, worm, persistence, rat, c2 agent | 4 | |
| npm@quick-start-soft/quick-markdown-print | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@quick-start-soft/quick-markdown | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@quick-start-soft/quick-remove-image-background | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@quick-start-soft/quick-git-clean-markdown | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@quick-start-soft/quick-document-translator | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@quick-start-soft/quick-markdown-image | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@quick-start-soft/quick-task-refine | credential stealer, data exfiltration, worm, persistence | 1 | |
| npm@asyncapi/modelina | credential stealer, data exfiltration, worm, persistence | 2 | |
| npmposthog-react-native | credential stealer, data exfiltration, worm, persistence | 2 | |
| npmposthog-node | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/secret-scanner-wasm | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/csv-parse | credential stealer, data exfiltration, worm, persistence | 3 | |
| npm@postman/node-keytar | credential stealer, data exfiltration, worm, persistence | 4 | |
| npm@postman/tunnel-agent | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/wdio-allure-reporter | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/postman-mcp-cli | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/mcp-ui-client | credential stealer, data exfiltration, worm, persistence | 2 |