JFrog Security Research
< Back

Malicious Packages

Last Updated On 8 Jun, 2025

3508
Malicious packages
disclosed
  • twitter
    c2pa-js
    npm•<1k total downloads
    Published on 8 Jun, 2025
  • twitter
    payu-ui-v2
    npm•<1k total downloads
    Published on 8 Jun, 2025
  • twitter
    arc-offsec-custom-library6
    npm•<1k total downloads
    Published on 6 Jun, 2025
  • twitter
    conventional-changelog-action
    npm•<1k total downloads
    Published on 6 Jun, 2025
  • twitter
    processwithcloudevents-client
    npm•<1k total downloads
    Published on 6 Jun, 2025
  • twitter
    sechub-web-ui
    npm•<1k total downloads
    Published on 6 Jun, 2025
  • twitter
    esm-imports
    npm•<1k total downloads
    Published on 4 Jun, 2025
  • twitter
    copy-package-contents
    npm•<1k total downloads
    Published on 4 Jun, 2025
  • twitter
    tim-website
    npm•<1k total downloads
    Published on 4 Jun, 2025
  • twitter
    talkingagent
    npm•<1k total downloads
    Published on 4 Jun, 2025