JFrog Security Research

Malicious Packages

Last Updated On 9 Jan, 2026

4133

Malicious packages
disclosed

wac-react-relaynpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
@brokenzzz/garfishnpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
lyonscgnpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
@kyriba/ui-workspacenpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
icon-servicenpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
@kyriba/mf-kitnpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
@zuora-marketing/lintingnpm
npm•<1k total downloads
Published on 9 Jan, 2026 ●
Published on 9 Jan, 2026 ●
not-remixnpm
npm•<1k total downloads
Published on 8 Jan, 2026 ●
Published on 8 Jan, 2026 ●
yunxohang11npm
npm•<1k total downloads
Published on 5 Jan, 2026 ●
Published on 5 Jan, 2026 ●
@icecreampie/internallib_v147npm
npm•<1k total downloads
Published on 8 Jan, 2026 ●
Published on 8 Jan, 2026 ●