JFrog Security Research
< Back

Malicious Packages

Last Updated On 28 Jul, 2025

3760
Malicious packages
disclosed
  • twitter
    isl-server
    npm•<1k total downloads
    Published on 28 Jul, 2025
  • twitter
    azure-documentdb-node
    npm•<1k total downloads
    Published on 13 Aug, 2025
  • twitter
    simple-web-app-package
    npm•<1k total downloads
    Published on 6 Aug, 2025
  • twitter
    @evt-cdk/codepipeline
    npm•<1k total downloads
    Published on 6 Aug, 2025
  • twitter
    google-webfonts-helper
    npm•<1k total downloads
    Published on 6 Aug, 2025
  • twitter
    findsomeluck
    npm•<1k total downloads
    Published on 15 Aug, 2025
  • twitter
    bug-bounty-hunter
    npm•<1k total downloads
    Published on 15 Aug, 2025
  • twitter
    bug-bounty
    npm•<1k total downloads
    Published on 15 Aug, 2025
  • twitter
    vite-plugin-netx-project
    npm•<1k total downloads
    Published on 15 Aug, 2025
  • twitter
    somemalicious
    npm•<1k total downloads
    Published on 15 Aug, 2025