JFrog Security Research
< Back

Malicious Packages

Last Updated On 13 Mar, 2026

4968
Malicious packages
disclosed
  • twitter
    react-refresh-update
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    babelcl
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    rrweb-v1
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    @adamallana0909/apple-research-test
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    @iflow-mcp/watercrawl-watercrawl-mcp
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    chokader
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    typescript-mock-data
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    trello-enterprises
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    mws-common-ui
    npm•<1k total downloads
    Published on 13 Mar, 2026
  • twitter
    malachai-gql-schema
    npm•<1k total downloads
    Published on 12 Mar, 2026