JFrog Security Research
< Back

Malicious Packages

Last Updated On 28 Jul, 2025

3658
Malicious packages
disclosed
  • twitter
    @ai0x1337/budoux-extension
    npm•<1k total downloads
    Published on 28 Jul, 2025
  • twitter
    @googlesitekit/assets
    npm•<1k total downloads
    Published on 25 Jul, 2025
  • twitter
    axr-smart-contracts
    npm•<1k total downloads
    Published on 21 Jul, 2025
  • twitter
    ngx-satoris
    npm•<1k total downloads
    Published on 17 Jul, 2025
  • twitter
    @company-internal/logger
    npm•<1k total downloads
    Published on 17 Jul, 2025
  • twitter
    fuzzponent
    npm•<1k total downloads
    Published on 26 Jul, 2025
  • twitter
    scheduler-builtin
    npm•<1k total downloads
    Published on 25 Jul, 2025
  • twitter
    airbnb-booking
    npm•<1k total downloads
    Published on 25 Jul, 2025
  • twitter
    react-server-dom-turbopack-experimental
    npm•<1k total downloads
    Published on 25 Jul, 2025
  • twitter
    scheduler-experimental-builtin
    npm•<1k total downloads
    Published on 25 Jul, 2025