Every week, our malware detection systems scan thousands of new and updated packages across public registries like npm and PyPI. This time, we confirmed over 135 malicious packages, ranging from typosquatting and credential stealers to backdoored libraries designed to slip past basic scanners.
This weekly snapshot is part of our ongoing Malicious Code Digest, where we publish continuous findings, confirm emerging threats, and help DevSecOps teams protect their pipelines before damage is done. If you want full context across all confirmed packages and past incidents, be sure to check the full digest.
Let’s break down what we found this week and why it matters.
| Ecosystem | Package | Date |
|---|---|---|
| npm | mysqldbstool:1.0.4 | Feb 09, 2026 |
| npm | @acqui-calm-library/acqui-hero-carousel-section:999.99.999 | Feb 09, 2026 |
| npm | ringcentral-google-drive-notification-add-in:2.2.2 | Feb 09, 2026 |
| npm | date-fns-2:1.0.0 | Feb 09, 2026 |
| npm | redux-saga-task-cancel-rce:1.0.0 | Feb 09, 2026 |
| npm | teeseest:1.6.2 | Feb 09, 2026 |
| npm | internal-logger-embaby:9.9.10 | Feb 09, 2026 |
| npm | @xcxcxxx/gsap3:99.10.90 | Feb 09, 2026 |
| npm | bdf-server-clone:1.0.0 | Feb 09, 2026 |
| npm | react-native-kraken-oauth:1.0.1 | Feb 09, 2026 |
| npm | mysqldbstool:1.0.5 | Feb 09, 2026 |
| npm | mysqldbtool:1.0.3 | Feb 09, 2026 |
| npm | meta-api-boostx-v2-pro:1.0.1-pro | Feb 09, 2026 |
| npm | @web-ib/chevre:9000.0.0 | Feb 09, 2026 |
| npm | @eqder/bird:14.0.0 | Feb 09, 2026 |
| pypi | donotinstall:1.0 | Feb 09, 2026 |
| npm | frontend-buenaspracticas:99.9.9 | Feb 09, 2026 |
| npm | lbank-connector-nodejs:2.0.0 | Feb 09, 2026 |
| npm | @spectraltest/loglevel:2.5.0 | Feb 09, 2026 |
| npm | spectral-wraith:1.0.0 | Feb 09, 2026 |
| npm | supermoy1:0.30.1 | Feb 09, 2026 |
| npm | supervot5:0.30.1 | Feb 09, 2026 |
| npm | finalmoyloyt:0.30.1 | Feb 09, 2026 |
| npm | xmljs2bank:0.30.2 | Feb 09, 2026 |
| npm | superbankbackdoor:1.0.0 | Feb 09, 2026 |
| npm | superbankbackdoor:0.30.1 | Feb 09, 2026 |
| npm | cachelogger:0.30.1 | Feb 09, 2026 |
| npm | megadepsexploit:0.30.1 | Feb 09, 2026 |
| npm | megaexploitvorkemol:0.30.1 | Feb 09, 2026 |
| npm | megaexploitvorkemol1:0.30.1 | Feb 09, 2026 |
| npm | @!not/ui:0.0.1 | Feb 09, 2026 |
| npm | @jaspal.dhillon/corplib:999.0.0 | Feb 09, 2026 |
| npm | corplib-internal:999.0.0 | Feb 09, 2026 |
| npm | kkkarem:2.0.0 | Feb 09, 2026 |
| npm | kkkaremn:1.0.0 | Feb 09, 2026 |
| npm | karemz:1.0.0 | Feb 09, 2026 |
| npm | karemz:2.0.0 | Feb 09, 2026 |
| npm | karemzz:2.0.0 | Feb 09, 2026 |
| npm | karemz:5.0.0 | Feb 09, 2026 |
| npm | kkkaremn:7.0.0 | Feb 09, 2026 |
| npm | kkkaremn:8.0.0 | Feb 09, 2026 |
| npm | kkkaremnn:11.0.0 | Feb 09, 2026 |
| npm | kkkaremnnn:1.0.0 | Feb 09, 2026 |
| npm | karem4:1.0.0 | Feb 09, 2026 |
| npm | karem3:1.0.0 | Feb 09, 2026 |
| npm | karem3:2.0.0 | Feb 09, 2026 |
| npm | karem5:1.0.0 | Feb 09, 2026 |
| npm | karem7:1.0.0 | Feb 09, 2026 |
| npm | karem8:1.0.0 | Feb 09, 2026 |
| npm | karem9:1.0.0 | Feb 09, 2026 |
| npm | karem10:1.0.0 | Feb 09, 2026 |
| npm | karemm1:1.0.0 | Feb 09, 2026 |
| npm | karem6:1.0.0 | Feb 09, 2026 |
| npm | karem2:1.0.0 | Feb 09, 2026 |
| npm | karemm3:1.0.0 | Feb 09, 2026 |
| npm | karemm4:1.0.0 | Feb 09, 2026 |
| npm | karemm6:1.0.0 | Feb 09, 2026 |
| npm | karemm5:1.0.0 | Feb 09, 2026 |
| npm | karemm7:1.0.0 | Feb 09, 2026 |
| npm | karemm2:1.0.0 | Feb 09, 2026 |
| npm | karem1:1.0.0 | Feb 09, 2026 |
| npm | monoping:1.0.6 | Feb 09, 2026 |
| npm | monoping:1.0.3 | Feb 09, 2026 |
| npm | eslint-plugin-fuel-react:1.0.0 | Feb 09, 2026 |
| npm | eslint-plugin-fuel-react:1.0.1 | Feb 09, 2026 |
| npm | eslint-plugin-fuel-react:1.0.2 | Feb 09, 2026 |
| npm | moltbot-termux:2026.1.27 | Feb 09, 2026 |
| pypi | iflow-mcp-dropbox-mcp-server-dash:0.1.0 | Feb 09, 2026 |
| pypi | iflow-mcp-dropbox-mcp-server-dash:0.1.1 | Feb 09, 2026 |
| npm | moltbot-termux:2026.1.28-4 | Feb 09, 2026 |
| pypi | baguette-agent:0.1.0 | Feb 09, 2026 |
| pypi | cnhkmcp:2.3.1 | Feb 09, 2026 |
| npm | @anthropic-field/cli:0.3.1 | Feb 06, 2026 |
| npm | @anthropic-field/cli:0.2.0 | Feb 06, 2026 |
| npm | @anthropic-field/cli:0.3.0 | Feb 06, 2026 |
| npm | @anthropic-field/cli:0.2.1 | Feb 06, 2026 |
| npm | @anthropic-field/cli:0.1.0 | Feb 06, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.1.30-nightly.202602012355 | Feb 06, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.1-zh.3 | Feb 06, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.1.30-nightly.202602011756 | Feb 06, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.1.30-nightly.202602012258 | Feb 06, 2026 |
| npm | openclaw-cn:2026.1.31-beta.0 | Feb 06, 2026 |
| npm | openclaw-cn:2026.1.31-beta.1 | Feb 06, 2026 |
| npm | @mmarena/mcp:0.1.4 | Feb 09, 2026 |
| npm | @mmarena/mcp:0.1.5 | Feb 09, 2026 |
| npm | @mmarena/mcp:0.1.6 | Feb 09, 2026 |
| npm | openclawapi:1.3.39 | Feb 09, 2026 |
| npm | openclawapi:1.3.45 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.2-3-nightly.202602050319 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.2-3-nightly.202602050507 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.3-1-nightly.202602050927 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.3-1-nightly.202602070455 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.6-3-nightly.202602071329 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.6-3-nightly.202602071903 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.6-3-nightly.202602080725 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.6-3-nightly.202602081330 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.6-3-nightly.202602081403 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.6-3-nightly.202602091214 | Feb 09, 2026 |
| npm | @qingchencloud/openclaw-zh:2026.2.9-nightly.202602101840 | Feb 11, 2026 |
| npm | @commonschema/blackstone-core:0.2.2-alpha | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.35 | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.43 | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.47 | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.7 | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.7-1 | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.9 | Feb 09, 2026 |
| npm | openclaw-pro:2026.2.96 | Feb 09, 2026 |
| npm | cryptoclaw:1.0.3 | Feb 09, 2026 |
| npm | @aruna-yoocrm/agiagent:2026.1.38 | Feb 09, 2026 |
| npm | agiagent-dev:2026.1.41 | Feb 09, 2026 |
| npm | openclaw-cn:0.1.4 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.2 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.3 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.4 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.5 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.6 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.7 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.8 | Feb 09, 2026 |
| npm | selfbot-lofy:1.0.9 | Feb 09, 2026 |
| npm | selfbot-lofy:1.2.0 | Feb 09, 2026 |
| npm | selfbot-lofy:1.2.1 | Feb 09, 2026 |
| npm | selfbot-lofy:1.2.3 | Feb 09, 2026 |
| npm | pressclaw:0.3.0 | Feb 09, 2026 |
| npm | @poolzin/pool-bot:2026.1.38 | Feb 09, 2026 |
| npm | @zzedbot/yunzhijia:1.0.2 | Feb 11, 2026 |
| npm | contact-button-podlet:5.8.5 | Feb 11, 2026 |
| npm | search-savedsearch-podlet:5.4.5 | Feb 11, 2026 |
| npm | search-newfrontier-podlet:3.1.5 | Feb 11, 2026 |
| npm | static-content-cannabis:999.0.0 | Feb 11, 2026 |
| npm | @iflow-mcp/bacoco-ai-expert-workflow-mcp:2.3.2 | Feb 11, 2026 |
| pypi | jsonconfig-utils:1.0.10 | Feb 11, 2026 |
| pypi | jsonconfig-utils:1.0.11 | Feb 11, 2026 |
| npm | ether-lint:5.9.0 | Feb 12, 2026 |
| npm | libjs-cqs:90.9.0 | Feb 12, 2026 |
| npm | collabs-merchants:99.9.12 | Feb 12, 2026 |
Secure Your Open Source Dependencies against Vulnerabilities and Malicious Code
Minimize risks and protect your applications from malicious packages with Xygeni Early Malware Detection. Prioritize and address the vulnerabilities that matter most. Our comprehensive solution offers real-time monitoring of your dependencies to detect and mitigate threats before they impact your software.
Managing open-source components in the current software development landscape is crucial due to the rising vulnerabilities and malicious code threats. Xygeni’s Open Source Security solution scans and blocks harmful packages upon publication, dramatically minimizing the risk of malware and vulnerabilities infiltrating your systems. Our comprehensive monitoring spans multiple public registries, ensuring all dependencies are scrutinized for safety and integrity. Xygeni enhances your team’s ability to maintain secure and reliable software projects by contextually prioritizing critical issues and facilitating streamlined remediation processes.
Xygeni uses multi-layered techniques to stop malicious code before it spreads. First of all, static code analysis detects obfuscation patterns, hidden payloads, and script abuse. In addition, behavioral sandboxing analyzes install hooks, runtime commands, and persistence tricks. Moreover, machine learning detection identifies zero-day npm malware and pypi malware variants missed by signature scanners. Finally, the Early Warning System monitors public repositories in real time, validates findings, and alerts DevOps teams immediately.
As a result, this combination ensures developers receive fast, actionable intelligence integrated directly into CI/CD workflows.
Why Developers Should Care About Malicious npm Packages
Modern threats rarely wait for runtime. For example, malicious npm packages often execute during installation, while pypi malicious packages hide token exfiltration or backdoors. Attackers:
- Flip private GitHub repos to public to replicate them.
- Exfiltrate credentials and secrets using encoded payloads.
- Use obfuscated JavaScript loaders to deploy ransomware or botnets.
In fact, malicious open-source packages surged 156% in one year. Therefore, teams that rely only on delayed feeds or basic scanners fall behind.
What This Malware Report Tracks in npm and PyPI
This digest is the central hub for:
- Confirmed malicious npm packages
- Confirmed pypi malicious packages
- Behavior-based detections of malicious code
- Registry-confirmed incidents
- Weekly and monthly malware report summaries
- Historical changelog of all npm malware and pypi malware findings
In other words, it provides a single point of reference. The research team at Xygeni updates this page weekly with links to full technical analyses and GitHub IOCs.
How to Protect Against Malicious npm Packages and PyPI Malware
Because of this growing risk, organizations need strong defenses:
- Enforce lockfile-only installs (
npm ci) in CI/CD. - Additionally, scan dependencies pre-install with Xygeni’s Early Warning Engine.
- Furthermore, block builds on malicious code signals using Guardrails.
- Generate SBOMs to trace indirect dependencies and apply policies.
- Above all, train developers to detect typosquatting, obfuscation, and suspicious install scripts.
Try Xygeni’s Malware Detection Tools
Xygeni delivers:
- Real-time detection of malicious code, including backdoors, spyware, and ransomware.
- In contrast to basic scanners, analysis across npm, PyPI, Maven, NuGet, RubyGems, and more.
- Automatic build blocking when the malware report identifies risk.
- Exploitability insights, maintainer reputation checks, and anomaly detection.
