Malicious Packages
Packages SafeDep has confirmed malicious, by ecosystem and version.
Packages SafeDep has confirmed malicious, by ecosystem and version.
| name | threat types | versions | Copy |
|---|---|---|---|
| npm@lazyutil/dater | credential stealer, data exfiltration, persistence, typosquat | 4 | |
| npm@frostnode/waitfor | credential stealer, data exfiltration, persistence, typosquat | 4 | |
| npm@nullzero/urlcat | credential stealer, data exfiltration, persistence, typosquat | 4 | |
| npmapintergrationpost | rat, c2 agent, persistence | 6 | |
| npm@withgoogle/stitch-sdk | credential stealer, data exfiltration | 2 | |
| npmeasy-day-js | rat, c2 agent, crypto drainer, credential stealer, persistence, typosquat | 2 | |
| npm@mastra/acp | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/agent-browser | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/agent-builder | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/agentcore | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/agentfs | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/ai-sdk | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/arize | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/arthur | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/astra | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-auth0 | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-better-auth | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-clerk | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-cloud | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-firebase | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-okta | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-studio | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-supabase | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/auth-workos | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/azure | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/blaxel | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/braintrust | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/brightdata | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/browser-firecrawl | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/browser-viewer | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/chroma | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/clickhouse | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/claude | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/client-js | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/cloud | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/cloudflare | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/cloudflare-d1 | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/codemod | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/convex | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/core | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/couchbase | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/cursor | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/dane | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/datadog | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/daytona | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/deployer | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/deployer-cloud | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/deployer-cloudflare | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 | |
| npm@mastra/deployer-netlify | rat, c2 agent, crypto drainer, credential stealer, persistence | 1 |