Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npm@joyfill/layouts | c2 agent, persistence | 1 | |
| npm@joyfill/components | c2 agent | 1 | |
| pypimrmustard | credential stealer, data exfiltration, persistence | 1 | |
| npmgs-uitk-testing-utils | dependency confusion, data exfiltration | 1 | |
| npmgs-uitk-object-utils | dependency confusion, data exfiltration | 1 | |
| npmuploader-frontend | data exfiltration, other | 1 | |
| npmuploader-frontend-legacy | data exfiltration, other | 1 | |
| npm@copilot-mcp/apex | credential stealer, data exfiltration, c2 agent, persistence | 4 | |
| npm@apexfdn/apex | credential stealer, data exfiltration, c2 agent, persistence | 1 | |
| npm@apexfdn/copilot-mcp | data exfiltration | 1 | |
| rubygemsgit_credential_manager | other | 4 | |
| rubygemsDendreo | other | 1 | |
| rubygemsfastlane-plugin-run_tests_firebase_testlab | other | 1 | |
| npm@asyncapi/generator | credential stealer, rat, c2 agent, data exfiltration, persistence | 1 | |
| npm@asyncapi/generator-helpers | credential stealer, rat, c2 agent, data exfiltration, persistence | 1 | |
| npm@asyncapi/generator-components | credential stealer, rat, c2 agent, data exfiltration, persistence | 1 | |
| nugetalbion-x-x | data exfiltration, c2 agent, rat | 1 | |
| nugetamazing-x-x | data exfiltration, c2 agent | 1 | |
| nugetcalc-x-x | data exfiltration, c2 agent, rat | 1 | |
| nugetgrandrp-x-x | data exfiltration, c2 agent | 1 | |
| nugetgta5rp-x-x | data exfiltration, c2 agent | 1 | |
| nugetl2-x-x | data exfiltration, c2 agent | 1 | |
| nugetmajestic-x-x | data exfiltration, c2 agent | 1 | |
| nugetrmrp-x-x | data exfiltration, c2 agent | 1 | |
| nugetrusfish4-x-x | data exfiltration, c2 agent | 1 | |
| nugetthrone-x-x | data exfiltration, c2 agent, rat | 1 | |
| nugettrigger-x-x | data exfiltration, c2 agent | 1 | |
| npm@flex-ng/error-component | dependency confusion, data exfiltration | 1 | |
| npm@flex-ng/filter-pipe | dependency confusion, data exfiltration | 1 | |
| npm@flex-ng/header-component | dependency confusion, data exfiltration | 1 | |
| npm@idms-corp/auth-ui | dependency confusion, data exfiltration | 1 | |
| npm@logdna-web/shared | dependency confusion, data exfiltration | 1 | |
| npm@logdna-web/styles | dependency confusion, data exfiltration | 1 | |
| npmtme-xca | dependency confusion, data exfiltration | 1 | |
| npmtme-xca-react | dependency confusion, data exfiltration | 1 | |
| npmtme-error | dependency confusion, data exfiltration | 1 | |
| npmenbd-react-logger | dependency confusion, data exfiltration | 1 | |
| npmenbd-react-error-boundry | dependency confusion, data exfiltration | 1 | |
| npmenbd-react-lib | dependency confusion, data exfiltration | 1 | |
| npmbox-react-uix | dependency confusion, data exfiltration | 1 | |
| npmsams-sr-sdk-h5 | dependency confusion, data exfiltration | 1 | |
| npmchat-adapter-zoom | dependency confusion, data exfiltration | 1 | |
| npmsalesforce-vscode-slds | dependency confusion, data exfiltration | 1 | |
| npmslds-lsp-client | dependency confusion, data exfiltration | 1 | |
| npmjscrambler | credential stealer, persistence | 5 | |
| nugetBraintree.Net | typosquat, credential stealer, data exfiltration | 4 | |
| nugetDependencyInjector.Core | credential stealer, data exfiltration | 4 | |
| nugetSipNet | typosquat, data exfiltration | 4 | |
| nugetSipNet.OpenAI.Realtime | typosquat | 1 | |
| npm@injectivelabs/sdk-ts | credential stealer, data exfiltration | 1 |