JFrog Security Research
< Back

Malicious Packages

Last Updated On 31 Jan, 2026

4332
Malicious packages
disclosed
  • twitter
    pyload-ng
    pypi•<1k total downloads
    Published on 31 Jan, 2026
  • twitter
    banquet-runtime-modules
    npm•<1k total downloads
    Published on 30 Jan, 2026
  • twitter
    ezviz-shop-mall
    npm•<1k total downloads
    Published on 30 Jan, 2026
  • twitter
    dydx-v4-client
    pypi•<1k total downloads
    Published on 30 Jan, 2026
  • twitter
    dhgshop
    npm•<1k total downloads
    Published on 30 Jan, 2026
  • twitter
    @at-point/valiant-widgets-v2
    npm•<1k total downloads
    Published on 29 Jan, 2026
  • twitter
    epic-asset-uploader
    npm•<1k total downloads
    Published on 29 Jan, 2026
  • twitter
    chai-as-produced
    npm•<1k total downloads
    Published on 28 Jan, 2026
  • twitter
    chai-as-executed
    npm•<1k total downloads
    Published on 19 Jan, 2026
  • twitter
    cugraph-service-server
    pypi•<1k total downloads
    Published on 28 Jan, 2026