JFrog Security Research
< Back

Malicious Packages

Last Updated On 31 Aug, 2025

3785
Malicious packages
disclosed
  • twitter
    vscode-js-profile-flame
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    typespec-validation
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    cameraroll
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    hello-arc-windows
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    arbutus-docs
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    accumulateinfo
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    text-openai-embedding-js
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    batchedbridge
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    kiota
    npm•<1k total downloads
    Published on 31 Aug, 2025
  • twitter
    hello-arc
    npm•<1k total downloads
    Published on 26 Aug, 2025