malicious-software-packages-dataset · Index

extension/dist/browser/extension.js.map##unicode-escape@4925 Sep 16 malicious-software-packages-dataset

be18d09382ccc17227ef80af4087cde3e0bc19e1a231a6f59a3b93e9eedd24ed K(Li₇)O₅(As₂CPSXe)H₆(Cm₇Db₁₈FOs₂Po₅U)Md₅(BkPa₂Pm₃Pt)

extension/dist/desktop/extension.js.map##unicode-escape@2872 Sep 16 malicious-software-packages-dataset

66311941113df72e8c5c32ef9e8669a76f90d134595a85bcd34930fee8b6e8f9 K(Li₆)O₃(PSXe)H₅(Cm₆Db₁₅Os₂Po₄U)Md₅(BkPa₂Pm₃Pt)

package/lib/cjs/regular/jsonrepair.js.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

034bcdde824ce0ee133fc01cba26bde2f48ef86a2be17ccde63e7355cac9b205 H(Db)Md₂(Pa)

package/dist.es2015/index.js.map##unicode-escape@1302 Sep 16 malicious-software-packages-dataset

9a5b65f7198e3ac9360627ab32f7317398608737b979300e958df804b29ea064 H(Db)

package/lib/esm/streaming/core.js.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

fa6ef26aa183754856a1bb1f62d6889927100b1cc0c2290a4795f5e47b28c413 O(S)H(Db)Md₂(Pa)

package/lib/umd/jsonrepair.js.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

05c70c747840f651000913e4ccedd43951b814b91c4a7e4f4601d8f0c17d6c99 H(Db₂)Md₂(Pa)

package/lib/esm/regular/jsonrepair.js.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

ed1ca22fba0cb2e7b701b154650d9db5a636c4d0b5d6d3604ef2d947ed83b231 H(Db)Md₂(Pa)

package/lib/cjs/streaming/core.js.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

c33de03ac16704b49cbf44a9c244105a1bc0ff08d3c9eac335a16827c37b96fd O(S)H(Db)Md₂(Pa)

package/dist/utils/p-retry/index.cjs.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

a13653c6799f5a31050411db87cb87d8c5cffab8d64d517d1a0b019cb67f362c Md

package/dist/utils/p-retry/index.js.map##unicode-escape@0 Sep 16 malicious-software-packages-dataset

75fa56bee4f25a92fcd6a5a8a7d091c625bbe404ed9cb72134e379333e1dcdf7 Md

nstar-y/libsignal Signal protocol implementation for Node.js Sep 15 malicious-software-packages-dataset

c4df566d172e08b041cdee91b54f0fd2a20f3a841061099f2409a95abc7ca60b O₄(C₂CaDyS₃)H₅(Cm₄Cr₅Db₁₄OsPo)Md₃(Pa₅Pt)

libsignal-node Sep 14 malicious-software-packages-dataset

b75ea9e43f024f0f7c05f4b0effc075688c77620dfd98092b959486cb1739e66 H₄(CmCr₅Db₅Os)Md₂(Pa₂Pt)

Charpup-skill-security-auditor-backdoor-skill.zip Apr 24 malicious-software-packages-dataset

19e0ceaae35a75ea563babfe2f5c58476c56d765f558620a8f4539300ea0891a

openclaw-thiagoruss0-google-drivezqx.zip Apr 24 malicious-software-packages-dataset

d3e1b95172f67c0ef3cab3cbadc9e5cdf2d943cc3fc7dc1774c33ad0a691796c

cisco-ai-defense-skill-scanner-file-reader.zip Apr 24 malicious-software-packages-dataset

61e97e9ece6ad861cbbfebe804ffdaccc9f910f3a893091249fa56d5c1f026ad H(F)

tjade273-agent-skills-skills-simple-formatter.zip Apr 24 malicious-software-packages-dataset

7c28aeda44fd250e17d06287682754fe0056cb202be7fd72060226bb3f4bbd1e K(Mc)H(Cm)Md(Pa)

sanjay3290-ai-skills-skills-google-sheets.zip Apr 24 malicious-software-packages-dataset

5ec84fd348b90d015738fdd2f1cffc1f5f5c008229cd9c9c271d996171c454d0 K(Am)O₆(Ca₃CoErEu₂SXe)H₄(Cm₂₅Db₇Os₂Po₃)Md(Pa)

66% Standard Google Sheets OAuth skill, no malicious behavior

sanjay3290-ai-skills-skills-gmail.zip Apr 24 malicious-software-packages-dataset

fe589df6b0b03cb7e8048ce9b8a61e603eecdd36256c48f5d54deb261210de71 K(Am)O₇(Ca₄AsC₃CoEu₂SXe)H₅(Cm₂₄Db₁₁FOs₂Po₃)Md(Pa)

token/oauth

openclaw-thiagoruss0-youtube37puq.zip Apr 24 malicious-software-packages-dataset

6a6dfd53e760008cd32f2213b950ccc1f37151ae6965bc071a77645e7ee975a0

sanjay3290-ai-skills-skills-google-drive.zip Apr 24 malicious-software-packages-dataset

f062763c6573a38583c4f4c437c503868e4bfd0d808226869827873470ea3f51 K(Am)O₆(Ca₃CoErEu₂SXe)H₅(Cm₂₅Db₆F₂Os₃Po₃)Md₂(Pa)

65% Legitimate Google Drive skill

openclaw-thiagoruss0-jirayb4nt.zip Apr 24 malicious-software-packages-dataset

1bd583ff6e5c91a9427ebd959f058fcdc05ea29dcad6bdc42a02bc45bc826b94

mitsuhiko-agent-stuff-skills-google-workspace.zip Apr 24 malicious-software-packages-dataset

ac7f84a4154e343bc8221d9b9aae306e9c281d40d8bc43725e3f12e62564b6a1

openclaw-thiagoruss0-youtubea.zip Apr 24 malicious-software-packages-dataset

f90ce6e0d319aff1e957da0c6a430be41afd87561a6e596138138efae91c4374

2025 07-21-safe-chain-test-v1.0.1 Apr 24 malicious-software-packages-dataset

745dcaecae00f79fb7ce7c14f1600824a2621f43a8f867ea54d5287b491e9935 O(Dy)H₄(Cm₃Db₃Os₂Po₂)Md₂(InPa₂)

65% Explicitly harmless test package

2025 07-27-molybiz-mepage-ui-v1.0.0 Apr 24 malicious-software-packages-dataset

727009843afd827c9f8186dc02a0e81feaf4fc67caa41b4c6c9e41f749080700 O(S)H(Db₂)Md(Pa₃)

28% Harmless placeholder code

2025 03-06-nodejs-website-v2.4.4 Apr 24 malicious-software-packages-dataset

e43f579dd975736fa517b37f8eb87b310ce9a4985b037a95f117f1fa8b4e3c5d O(As)H(Db₂)Md(Pa)

pack/archive

2024 11-18-node-polyfill-webpack-plugins-v99.11.18 Apr 24 malicious-software-packages-dataset

2ccf774344a41c177c950c651a862bd8d88b3d49192b235e161007485d2505aa

2025 11-08-synqroomkit-v0.3.0 Apr 24 malicious-software-packages-dataset

77230bf50bd5f871f94109777e035c938d09c101747e11ae84c0c6bd2e8257ab H₅(CmDb₅FPoU)Md(Pa₇)

24% Legitimate React multiplayer toolkit

2025 11-08-synqroomkit-v0.1.0 Apr 24 malicious-software-packages-dataset

314938b3bc1791018921e72e766bcfcc5fff5b6502d8dc0a2008f16805e8fba6 H₂(Db₃U)Md(Pa₆)

19% Legitimate React lobby toolkit

2025 11-08-synqroomkit-v0.1.2 Apr 24 malicious-software-packages-dataset

153b9f9528c92fce34d45e57e3dc3e4fc5963fc90cc0c95615dec65cfc02ebfc H₅(CmDb₅FPoU)Md(Pa₇)

23% Legitimate React toolkit code

2026 03-02-fadlsjf-v1.0.0 Apr 24 malicious-software-packages-dataset

9d5914711a2e378b81a8b2b266678b8254178c62105a95f55dca46e1e49002da H₂(Db₂U)Md(Pa)

Harmless DOM stub

2025 07-21-safe-chain-test-v1.0.2 Apr 24 malicious-software-packages-dataset

319af42977e1dcc42bd14201efa5e8683afbb3dbfdad0f9ba21d9b6fb54f6b45 O(Dy)H₄(Cm₃Db₃Os₂Po₂)Md₂(InPa₂)

65% Explicitly harmless test package

2025 07-21-safe-chain-test-v1.0.0 Apr 24 malicious-software-packages-dataset

2aa515d41b349dfb9f390133626561c29dad0015699342df1e3c884aad4ad6c0 O(Dy)H₄(Cm₂Db₃Os₂Po₂)Md₂(InPa₂)

64% Explicitly harmless test code

2025 03-13-eslint-plugin-cdp-project-v1.1.1 Apr 24 malicious-software-packages-dataset

c4ce0422575bb68cbc42647ecefb134cd9087fbc5d45bc820aaaed9b8ed2bf42 O(As)H(Db₂)Md(Pa₂)

pack/archive

2026 01-19-n8n-nodes-gg-udhasudsh-hgjkhg-official-v0.0.58 Apr 24 malicious-software-packages-dataset

31099e8749a075ab226833d128ed52b60f1262b1f90492f6ea7239dd81cdbb45 O(As)H(Db₂)Md(Pa)

pack/archive

2025 11-08-synqroomkit-v0.2.0 Apr 24 malicious-software-packages-dataset

1f8a0841751638ff00bcbd993e8ce9fa5645a4a774496021fc00a8d404bdcc73 H₂(Db₃U)Md(Pa₆)

19% Legitimate React lobby toolkit

2026 03-02-fadlsjf-v1.0.1 Apr 24 malicious-software-packages-dataset

34cd759d339a07f18ca3d2824b42396f805d99e477e845012784ab78a0d4ff28 H₂(Db₂U)Md(Pa)

20% Harmless Hello World code

2026 01-11-n8n-nodes-gg-udhasudsh-hgjkhg-official-v0.0.21 Apr 24 malicious-software-packages-dataset

c27e622abf7274a45d5768208f0fac069d88166113b5bfad8d2530cbcfc4fb5e

2024 11-13-eslint-plugin-foody-custom-v7.3.9 Apr 24 malicious-software-packages-dataset

d12b2e536b5eca337d9b211cf67aaa85e1af313b5809eaa06762683c2a69d64c O(As)H(Db₂)Md(Pa)

pack/archive

2024 11-13-eslint-plugin-sls-fe-lint-v6.5.8 Apr 24 malicious-software-packages-dataset

44310683ec6bf92710fd4b835a412273316c9c441a4fca259f519fb4e96e63de

2024 04-23-epc-help-widget-v6.6.6 Apr 24 malicious-software-packages-dataset

f564ffcf20b3aea1b86b393d068aa0b7df01d91e981f03192152bbd2de4477fd

2025 11-17-node-calculator-x7k9-v3.8.0 Apr 24 malicious-software-packages-dataset

12ace8af6f0db3b97eba3a2e467086e2c83797e74b06931b7749f8381d099046

2026-02-10-@rashidazarang_airtable-mcp v4.0.0 Apr 24 malicious-software-packages-dataset

85b6154f9ee1fd41be15ce8adcf1e54cbd87e7bc2301f15b8cabd45856746f37 K(Li)O(S)H₇(Cm₁₇CrDb₉F₅Os₅Po₅U)Md₂(InPa₈)

44% Legitimate Airtable MCP server

2025 02-02-node-tg-bot-sdk-v0.67.0 Apr 24 malicious-software-packages-dataset

64a0a15bc9c629ab719c98c889a9bd226103a4f9a850ba2dbfcb9f7ae15a206d O₂(AsS)H(Db₂)Md(Pa₂)

pack/archivehidden-payload/package

2025-12-31-@rashidazarang_airtable-mcp v3.2.8 Apr 24 malicious-software-packages-dataset

0d05ec88420fb5798493a26b23c2d2de5f5682775ad48082655c07868604aa99 K(Li)O(S)H₆(Cm₁₄Db₈F₄Os₄Po₅U)Md₂(InPa₈)

40% Legitimate Airtable MCP server

2025 12-03-tailwind-variables-v2.3.1 Apr 24 malicious-software-packages-dataset

8957b3cafe691d8589331e9a96d3df28df30eed33121b8562495399a2e6b3443 H(Db₃)

Legitimate CSS utility package

2026 03-17-navi-design-system-v99.0.0 Apr 24 malicious-software-packages-dataset

0c24fca524b049390291a05ef2a3e611381bab333103957ff6f303a1e9ee3537 O(As)H(Db₂)Md(Pa)

pack/archive

2026 01-17-n8n-nodes-gg-udhasudsh-hgjkhg-official-v0.0.53 Apr 24 malicious-software-packages-dataset

59d1dc8d1fcb81685b90a6e858537df68d5e690fa4e41c0641aadab2a7bba0a0

2026-03-06-@toptal_picasso-container v3.1.3 Apr 24 malicious-software-packages-dataset

1e0b3527360099e738753545a33f25d035b9508f9e0fc28bb6d93da7adbf156d H(Db₃)Md(Pa₆)

26% Legitimate UI component library

2026 01-13-hackerxhj-v1.4.0 Apr 24 malicious-software-packages-dataset

53bc051c194a8c230377560daf38875655811a9e41dab7014d2d997fb89b504e O₃(AsSXe)H₃(Cm₅Db₃Po)Md₃(InPa₄)

pack/archivehidden-payload/package

2024 12-22-npm_linux-v2.0.0 Apr 24 malicious-software-packages-dataset

9795bda7228ebc6c95e2c4235bec8d18c73bc997cfbaedd51327008034f8dd19 O(As)H(Db₂)Md(Pa)

pack/archive

2025 12-16-n8n-nodes-gasdhgfuy-rejerw-ytjsadx-v0.0.79 Apr 24 malicious-software-packages-dataset

b261df7b2212494cf94decb521e05fcfe440774a841bd33edce0d8e684cb9c72

2025-12-18-@toptal_picasso-form v6.3.10 Apr 24 malicious-software-packages-dataset

13582e15eed8db6f54ad2ea9a923881e8468982016fac80ed4c44567829e0234 K(Li)H₂(Db₄U)Md(Pa₆)

28% Legitimate UI component library

2026 02-20-npm-doc-builder-v1.0.0 Apr 24 malicious-software-packages-dataset

1355a34e78610b61f3a46e346d7857251783fa12d34ded55f6a0204197bfb7c8

2025-09-02-@fastifyv4_fastifyv4 v1.0.0 Apr 24 malicious-software-packages-dataset

6005d6d7c9770b18f53da4cd3499181fdbb2573a6ca43210e7e21283be2484ed O(S₂)H₃(Db₂F₂Po)Md(Pa)

66% Harmless dependency confusion POC

2025-09-18-@toptal_picasso-form v6.3.3 Apr 24 malicious-software-packages-dataset

858e05534b818b65effdaa8a491c947da2d2408387144e88ce683f15993eb7c2 K(Li)H₂(Db₄U)Md(Pa₆)

28% Legitimate UI component library

2025 12-17-n8n-nodes-gasdhgfuy-rejerw-ytjsadx-v0.0.90 Apr 24 malicious-software-packages-dataset

ca9e80dda976b3eb6fe633d432e7f893163435e0e1396be974d13faef9a15924

2025 12-11-n8n-nodes-gasdhgfuy-rejerw-ytjsadx-v0.0.24 Apr 24 malicious-software-packages-dataset

1c0338e201373b2d215735dfda43ab158140797ed3263cfd9e9d61eaa2c0da21

2025-11-26-@toptal_picasso-grid v5.0.15 Apr 24 malicious-software-packages-dataset

3167db7341fd9326f8b80dd76546eda219aab7b6339d17d896bdb86ba27e5e3c H₂(CmDb₃)Md(Pa₆)

20% Legitimate UI component library

2025 12-09-redis-cookie-js-v3.0.4 Apr 24 malicious-software-packages-dataset

44f245cd4b047d735aac0ab2d5aafb315c16aa5ca2c2376e71fbf73a88e2cb80 O(S₂)H₃(Db₃F₂Po₂)Md(Pa₂)

59% Harmless test code

2025 01-30-dark-switch-v1.0.0-rc.1 Apr 24 malicious-software-packages-dataset

4643ea62dc5d68e7efc48cec1412a79ee529d96f5f1021d01f80a00890e720cf O(S)H₂(Db₂U)Md(Pa₄)

27% Legitimate React UI component

2026 03-06-ecto-spirit-v120.4.0 Apr 24 malicious-software-packages-dataset

bdee84df846219e54ce7e6a65dd427e83e76e8f7c8bade79f0cb6ff798d6ee0b H(Db₂)Md(Pa₄)

25% Harmless stub, no malicious behavior

2026 02-17-uudi-v13.0.1 Apr 24 malicious-software-packages-dataset

667c251c31fbd9a02cd6c2628b1912057d01fdad6065979bb7927df55243d19d H₄(Cm₂CrDb₈Os₂)Md₂(Pa₈)

38% Legitimate UUID library

2026 02-17-uudi-v13.0.0 Apr 24 malicious-software-packages-dataset

31a9e483831cfea0f4ea0fc048fd91d14d0c7137933473fd3cd257fd0f6da567 H₄(Cm₂CrDb₈Os₂)Md₂(Pa₈)

39% Legitimate UUID library

2025-09-17-@jdei_codmi-figma-test v0.0.2 Apr 24 malicious-software-packages-dataset

489f46a59fa1f670edb4ac1ec91cb493740b7b41212f1350531cedea52ec5ebc H₂(Cm₇Db₃)Md(Pa₅)

30% Legitimate Figma API client

2024-12-15-@poclabs_exo-phanto v1.0.0 Apr 24 malicious-software-packages-dataset

a0b688c73bf0a48f5aeae84fd9888b44e7ee2486891ac4b3f490ed2805704c21 O(S)H(Db₂)Md(Pa)

Explicitly fake test package

2025 05-18-evo-web-v100.0.3 Apr 24 malicious-software-packages-dataset

fc30f51d35f6e1954bdb7a2946affd7f32c17af15b80013f0661e813347118ef O₂(AsS)H(Db₂)Md(Pa)

pack/archivehidden-payload/package

2025-08-12-@mobile-sdk_videoads-ad-video-player-html5 v1.0.0 Apr 24 malicious-software-packages-dataset

6e05614cb708faf281163787c4be11b886c818cdde0a648e4888a0deecada560 O(S₂)H(Db₂)Md(Pa₄)

37% Benign placeholder PoC

2025-09-02-@fastifyv4_fastifyv4 v5.0.0 Apr 24 malicious-software-packages-dataset

f25a90e2149a205114b027c038ae03c425cacce33837e3188e12ebfda1164cd3 O(S₂)H₃(DbF₂Po)Md(Pa)

66% Harmless dependency confusion POC

2025-09-11-@toptal_picasso-grid v5.0.10 Apr 24 malicious-software-packages-dataset

ec677a628c8c55bad8f3562d958b36a2fc0a177bb58d906186edda777d19a60e H₂(CmDb₃)Md(Pa₆)

20% Legitimate UI component library

2026 02-07-mcp-iso8859-writer-v0.2.0 Apr 24 malicious-software-packages-dataset

d82551965d035ab4605b33ac02377a07e28087d08fe154812a70e67166d73714 H₅(CmDb₇FOsPo)Md₂(Pa₆)

18% Legitimate MCP file encoding server

2025-12-02-@toptal_picasso-form v6.3.8 Apr 24 malicious-software-packages-dataset

aa2cb1230c652f3527a9f805581de03dad48c5fbbd2128b2c37ff501b06eaa0e K(Li)H₂(Db₄U)Md(Pa₆)

28% Legitimate UI component library

2026 01-25-mcp-iso8859-writer-v0.1.1 Apr 24 malicious-software-packages-dataset

a485ff8bcce5d01d1cc77b6955b07ecb9acd4446f9c18d1e090d45dbb6df4385 H₅(CmDb₇FOsPo)Md₂(Pa₆)

18% Legitimate MCP file encoding server

2025 12-24-eslint-config-genesys-spark-components-v7.7.7 Apr 24 malicious-software-packages-dataset

37389d3e070c0bbd36eb7da392c09eee310017d63e4b83be47981b19c6ea7cc2

2025-11-26-@toptal_picasso-form v6.3.7 Apr 24 malicious-software-packages-dataset

32babf1dc5e852d16e4892e6768b5f08ee7e6fa832bd5957bd16a3fe1865520c K(Li)H₂(Db₄U)Md(Pa₆)

28% Legitimate UI component library

2026 03-02-fzm-wagenkasten-api-v1.0.0 Apr 24 malicious-software-packages-dataset

095d568e6854db08e49a5d2a652693543c221c8d8c0662e1b2c1d7606facac7c O(S)H(Db₂)Md(Pa)

33% Harmless stub code

2025-09-18-@toptal_picasso-grid v5.0.11 Apr 24 malicious-software-packages-dataset

7d7fee184c7787e645b8c515b3144bef7dac30e55022ca176e1b03a675271dd7 H₂(CmDb₃)Md(Pa₆)

20% Legitimate UI component library

2025 06-27-bingo-abstract-transport-v0.5.0 Apr 24 malicious-software-packages-dataset

56455f1dbc29f89ffca2ef2498c384ec234fc9846bac342ef7f2f6cf61e721cc H₄(CmDb₃OsPo)Md₂(Bk₂Pa₂)

6% Legitimate npm package

2025 07-19-bingo-abstract-transport-v2.0.0 Apr 24 malicious-software-packages-dataset

63c1aae03d766ea4a52139508d79fe8df244a0d71e03318b071282f5d010d28b O(S)H₃(Cm₂Db₃Po₂)Md₂(Bk₄Pa₃)

16% Legitimate open-source transport library

2026-03-10-@toptal_picasso-grid v5.0.18 Apr 24 malicious-software-packages-dataset

e5652ab2c9e9c30deabb1683f91198437089bbec2bbb98fb216a54e215f9da4c H₂(CmDb₃)Md(Pa₆)

20% Legitimate UI component library

2025 06-27-bingo-abstract-transport-v0.5.1 Apr 24 malicious-software-packages-dataset

c6e967a453f58c1eeb79b795ec62742f0347300d8c2c64fca09192a29e4ae795 O(S)H₃(CmDb₃Os)Md₂(Bk₂Pa₃)

12% Legitimate open-source package

2025 07-19-bingo-abstract-transport-v0.5.2 Apr 24 malicious-software-packages-dataset

dc8675916dbbae6d7d5f52c4dc74055da466d5cb7c84b2923f59cbea589b5779 O(S)H₄(Cm₂Db₃OsPo)Md₂(Bk₂Pa₃)

12% Legitimate open-source package

2025-12-02-@toptal_picasso-grid v5.0.16 Apr 24 malicious-software-packages-dataset

5d306322aa75d22031ac3c8849a45682a39ada53c4d2b6f82eb1f1d97ffaead0 H₂(CmDb₃)Md(Pa₆)

20% Legitimate UI component library

2025-12-24-@hemanshu_patil_xcode v0.1.0 Apr 24 malicious-software-packages-dataset

ae74c288cb41b991b4d7a8e4d75cea8bf65c87d52c1b3be0b1e7a9e728d54f37 H₂(Db₂Po)

Harmless CLI scaffold

2025 12-15-n8n-nodes-gasdhgfuy-rejerw-ytjsadx-v0.0.48 Apr 24 malicious-software-packages-dataset

603fcf5a8ba6c2980fbde687c9828efa248d3d8e7bb2a5ed98654e0c9be91ade

2025-12-03-@toptal_picasso-popper v2.0.1 Apr 24 malicious-software-packages-dataset

191701b86c65f7a34ef31a4e41d24ee9a6a912acfcb48631a0fc4cb3c65d7efa K(Li)H₂(Db₃U)Md(Pa₅)

17% Legitimate UI component test code

2025-12-18-@toptal_picasso-rich-text-editor v17.2.11 Apr 24 malicious-software-packages-dataset

66c44588c950e2b5c03f5fcbe9ea8345a5b1cfee99381c300e7fa879c8092003 K(Li)H₄(Cm₄Db₅OsU₃)Md(Pa₈)

35% Legitimate open-source editor package

2026-02-12-@toptal_picasso-rich-text-editor v17.2.13 Apr 24 malicious-software-packages-dataset

1caa7513979190e8948b7feed2e457a4a4069ae0c0cd7120ec26ca15c3ea1ccf K(Li)H₄(Cm₄Db₅OsU₃)Md(Pa₈)

35% Legitimate rich text editor package

2025-09-18-@toptal_picasso-rich-text-editor v17.2.4 Apr 24 malicious-software-packages-dataset

1936c0f72b99bb92e6402d583a89dc9889ed443f4b18bba8191cc5bbf1d9bf75 K(Li)H₄(Cm₄Db₅OsU₃)Md(Pa₈)

35% Legitimate rich text editor package

2025-09-11-@toptal_picasso-link v3.0.6 Apr 24 malicious-software-packages-dataset

338f2b9b53f00faddb45fbad4f12ef33365a0ddc6da1a65817c99b93e728767e H₃(CmDb₃U)Md(Pa₅)

19% Legitimate UI component library

2025 03-07-eslint-config-dx-v3.0.0 Apr 24 malicious-software-packages-dataset

dc75dc8e670b2ab444e1cc410a64bb9281d17c02b33d48fb879dc9bea90c2d13 O₂(AsS)H(Db₃)Md(Pa₂)

pack/archivehidden-payload/package

2025 09-17-threads5-v1.0.0 Apr 24 malicious-software-packages-dataset

fe3c1186cec9f82cd3c682d229968d66e36c6c12be882aa0f83e11f3e80afe4e H(Db₂)Md(Pa)

Reserved name placeholder

2026 03-06-nest-moralis-v2.27.8 Apr 24 malicious-software-packages-dataset

fa1132eab534f15b731f91f3b443b273a2474f9f4317a6631f59badbbe74fae6 Md

2025 10-24-node-navsbx-v1.0.1 Apr 24 malicious-software-packages-dataset

0dcaa253c4930aa3680d7a54e9c19e7fbd01517347c27fb2aec75202074f74d3

Standard web framework dependencies

2026-03-10-@toptal_picasso-calendar v4.1.14 Apr 24 malicious-software-packages-dataset

bf150ec60d5937384ea2cc0db58bd142402ce4c0d6ec71b4467e30b4d14646cb H₃(CmDb₃U)Md(Pa₇)

26% Legitimate UI component package

2025 09-21-purple-npm-v1.0.3 Apr 24 malicious-software-packages-dataset

5b17913c54496e6ba3ba8268d8f42aa47dd847790b0328b60124cb4610b3f76d O(S)H₄(Db₃F₃Os₂Po)Md(Pa)

45% Harmless file creation script

2025 07-21-telenet-v1.0.0 Apr 24 malicious-software-packages-dataset

3c8e39520b10fd1b02fabff300f34b1159f119d8ded7a4ed9c0110d9b9d8f8f7 O(S₂)H(Db₂)Md(Pa₂)

58% Harmless PoC stub

2025 09-21-purple-npm-v1.0.8 Apr 24 malicious-software-packages-dataset

30307ac616c62e3768da75e30dc4f31ad0517f1cc40299d690965c8834b63d3c O(S₃)H₄(Db₃F₃Os₂Po₂)Md(Pa)

64% Harmless file creation script

2025 07-28-nio4r-v2.0.0 Apr 24 malicious-software-packages-dataset

e1d09794481d32f0dabb9cdcc2aec15aae7c45b3fcdf3e574f687c7782c54b96

2025-09-17-@toptal_picasso-rich-text-editor v17.2.3 Apr 24 malicious-software-packages-dataset

bb7b702c64e8e3cc3590636a889f47d507ee7edfb123169a9e3d6730f82b4e7c K(Li)H₄(Cm₄Db₅OsU₃)Md(Pa₈)

35% Legitimate rich text editor package