JFrog Security Research
< Back

Malicious Packages

Last Updated On 21 Apr, 2026

5613
Malicious packages
disclosed
  • twitter
    xinference
    pypi•<1k total downloads
    Published on 21 Apr, 2026
  • twitter
    claude-skills-library
    npm•<1k total downloads
    Published on 21 Apr, 2026
  • twitter
    6161test1234
    npm•<1k total downloads
    Published on 22 Apr, 2026
  • twitter
    box-ui-elements-usm
    npm•<1k total downloads
    Published on 21 Apr, 2026
  • twitter
    shopport
    npm•<1k total downloads
    Published on 21 Apr, 2026
  • twitter
    @bmg-web/bmg-review-basket
    npm•<1k total downloads
    Published on 20 Apr, 2026
  • twitter
    @bmg-web/bmg-styles
    npm•<1k total downloads
    Published on 20 Apr, 2026
  • twitter
    @bmg-web/bmg-snackbar
    npm•<1k total downloads
    Published on 20 Apr, 2026
  • twitter
    @bmg-web/bmg-external-link
    npm•<1k total downloads
    Published on 20 Apr, 2026
  • twitter
    @bmg-web/bmg-dialog
    npm•<1k total downloads
    Published on 20 Apr, 2026