Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npm@postman/wdio-junit-reporter | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/pm-bin-macos-arm64 | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/pm-bin-linux-x64 | credential stealer, data exfiltration, worm, persistence | 2 | |
| npm@postman/aether-icons | credential stealer, data exfiltration, worm, persistence | 2 | |
| npmhyatt-residential-roster | typosquat | 1 | |
| npmhyatt-album | typosquat | 1 | |
| npmhyatt-avatar | typosquat | 1 | |
| npm@ctrl/tinycolor | credential stealer, data exfiltration | 1 | |
| npmansi-styles | crypto drainer | 1 | |
| npmdebug | crypto drainer | 1 | |
| npmchalk | crypto drainer | 1 | |
| npmsupports-color | crypto drainer | 1 | |
| npmstrip-ansi | crypto drainer | 1 | |
| npmansi-regex | crypto drainer | 1 | |
| npmwrap-ansi | crypto drainer | 1 | |
| npmcolor-convert | crypto drainer | 1 | |
| npmcolor-name | crypto drainer | 1 | |
| npmis-arrayish | crypto drainer | 1 | |
| npmslice-ansi | crypto drainer | 1 | |
| npmerror-ex | crypto drainer | 1 | |
| npmcolor-string | crypto drainer | 1 | |
| npmsimple-swizzle | crypto drainer | 1 | |
| npmsupports-hyperlinks | crypto drainer | 1 | |
| npmhas-ansi | crypto drainer | 1 | |
| npmchalk-template | crypto drainer | 1 | |
| npmbackslash | crypto drainer | 1 | |
| npmnx | credential stealer, data exfiltration, wiper | 1 | |
| npm@nx/js | credential stealer, data exfiltration, wiper | 1 | |
| npmtensorflowjs | typosquat | 1 | |
| pypibitensor | credential stealer, data exfiltration, rat, persistence, crypto drainer, typosquat | 2 | |
| pypibittenso-cli | credential stealer, data exfiltration, rat, persistence, crypto drainer, typosquat | 1 | |
| pypiqbittensor | credential stealer, data exfiltration, rat, persistence, crypto drainer, typosquat | 1 | |
| pypibittenso | credential stealer, data exfiltration, rat, persistence, crypto drainer, typosquat | 1 | |
| npmeslint-config-prettier | other | 4 | |
| npmeslint-plugin-prettier | other | 2 | |
| npmsnyckit | other | 1 | |
| npm@pkgr/core | other | 1 | |
| npmnapi-postinstall | other | 1 | |
| npmexpress-cookie-parser | typosquat | 1 | |
| npmslf4j-api-js | typosquat | 1 | |
| npmnyc-config | typosquat | 1 | |
| npmchrome-api-utils | rat, persistence, dependency confusion, typosquat | 1 | |
| npmgrafana-sentry-datasource | rat, persistence, dependency confusion, typosquat | 1 | |
| npm@patternfly-v5/patternfly | rat, persistence, dependency confusion, typosquat | 1 | |
| npmelectron-builder-13 | rat, persistence, dependency confusion, typosquat | 1 | |
| npmgraphql.vscode-graphql-syntax | rat, persistence, dependency confusion, typosquat | 1 | |
| npmmattermost-cloudnative-bootstrapper | rat, persistence, dependency confusion, typosquat | 1 | |
| npmthemes-vendor | typosquat | 2 | |
| npmx509-escaping | typosquat | 2 | |
| npmkeycloak-server | typosquat | 2 |