Uptime Report Research · Software Supply Chain
Malicious npm Packages: 63% of 222,159 Reports Were One Token-Farming Flood, While Worms Hit the Top 1,000
We counted every record of malicious npm packages in the OpenSSF database: 222,159 through 13 October 2026, 93% of all ecosystems. But 63% came from one tea.xyz token-farming flood in November 2025, and 17% from two bulk uploads with no detail. The dangerous part is small: 19 records hit top-1,000 packages like chalk, axios, and keyv.
222,159 malicious npm records, 2021 to 13 Oct 2026
63.3% tea.xyz token farming, filed 9 to 13 Nov 2025
19 records naming a top-1,000 npm package
0.4% of non-spam names are lookalikes of a top-1,000 package
6.9x npm vs PyPI, even with token farming removed
Every malicious npm report, day by day
Each square is one day. The color is the number of npm records the OpenSSF database published that day, from the first records in 2021 to our snapshot on 13 October 2026. Hover a square for the exact count.
0 1 to 4 5 to 19 20 to 49 50 to 199 200 to 999 1,000+
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec 2022 7,424 2023 2,291 2024 8,317 2025 191,307 2026 12,771 Sat 01 Jan 2022: 0 npm records Sun 02 Jan 2022: 0 npm records Mon 03 Jan 2022: 1 npm record Tue 04 Jan 2022: 0 npm records Wed 05 Jan 2022: 0 npm records Thu 06 Jan 2022: 0 npm records Fri 07 Jan 2022: 0 npm records Sat 08 Jan 2022: 0 npm records Sun 09 Jan 2022: 0 npm records Mon 10 Jan 2022: 0 npm records Tue 11 Jan 2022: 0 npm records Wed 12 Jan 2022: 0 npm records Thu 13 Jan 2022: 0 npm records Fri 14 Jan 2022: 0 npm records Sat 15 Jan 2022: 0 npm records Sun 16 Jan 2022: 0 npm records Mon 17 Jan 2022: 0 npm records Tue 18 Jan 2022: 0 npm records Wed 19 Jan 2022: 0 npm records Thu 20 Jan 2022: 0 npm records Fri 21 Jan 2022: 0 npm records Sat 22 Jan 2022: 0 npm records Sun 23 Jan 2022: 0 npm records Mon 24 Jan 2022: 0 npm records Tue 25 Jan 2022: 0 npm records Wed 26 Jan 2022: 0 npm records Thu 27 Jan 2022: 0 npm records Fri 28 Jan 2022: 0 npm records Sat 29 Jan 2022: 0 npm records Sun 30 Jan 2022: 0 npm records Mon 31 Jan 2022: 0 npm records Tue 01 Feb 2022: 0 npm records Wed 02 Feb 2022: 0 npm records Thu 03 Feb 2022: 0 npm records Fri 04 Feb 2022: 0 npm records Sat 05 Feb 2022: 0 npm records Sun 06 Feb 2022: 0 npm records Mon 07 Feb 2022: 0 npm records Tue 08 Feb 2022: 0 npm records Wed 09 Feb 2022: 0 npm records Thu 10 Feb 2022: 0 npm records Fri 11 Feb 2022: 0 npm records Sat 12 Feb 2022: 0 npm records Sun 13 Feb 2022: 0 npm records Mon 14 Feb 2022: 0 npm records Tue 15 Feb 2022: 0 npm records Wed 16 Feb 2022: 0 npm records Thu 17 Feb 2022: 0 npm records Fri 18 Feb 2022: 0 npm records Sat 19 Feb 2022: 0 npm records Sun 20 Feb 2022: 0 npm records Mon 21 Feb 2022: 0 npm records Tue 22 Feb 2022: 0 npm records Wed 23 Feb 2022: 0 npm records Thu 24 Feb 2022: 0 npm records Fri 25 Feb 2022: 0 npm records Sat 26 Feb 2022: 0 npm records Sun 27 Feb 2022: 0 npm records Mon 28 Feb 2022: 0 npm records Tue 01 Mar 2022: 0 npm records Wed 02 Mar 2022: 0 npm records Thu 03 Mar 2022: 0 npm records Fri 04 Mar 2022: 0 npm records Sat 05 Mar 2022: 0 npm records Sun 06 Mar 2022: 0 npm records Mon 07 Mar 2022: 0 npm records Tue 08 Mar 2022: 0 npm records Wed 09 Mar 2022: 0 npm records Thu 10 Mar 2022: 0 npm records Fri 11 Mar 2022: 0 npm records Sat 12 Mar 2022: 0 npm records Sun 13 Mar 2022: 0 npm records Mon 14 Mar 2022: 0 npm records Tue 15 Mar 2022: 0 npm records Wed 16 Mar 2022: 0 npm records Thu 17 Mar 2022: 0 npm records Fri 18 Mar 2022: 0 npm records Sat 19 Mar 2022: 0 npm records Sun 20 Mar 2022: 0 npm records Mon 21 Mar 2022: 0 npm records Tue 22 Mar 2022: 0 npm records Wed 23 Mar 2022: 0 npm records Thu 24 Mar 2022: 0 npm records Fri 25 Mar 2022: 0 npm records Sat 26 Mar 2022: 0 npm records Sun 27 Mar 2022: 0 npm records Mon 28 Mar 2022: 0 npm records Tue 29 Mar 2022: 0 npm records Wed 30 Mar 2022: 0 npm records Thu 31 Mar 2022: 0 npm records Fri 01 Apr 2022: 0 npm records Sat 02 Apr 2022: 0 npm records Sun 03 Apr 2022: 0 npm records Mon 04 Apr 2022: 0 npm records Tue 05 Apr 2022: 0 npm records Wed 06 Apr 2022: 0 npm records Thu 07 Apr 2022: 0 npm records Fri 08 Apr 2022: 0 npm records Sat 09 Apr 2022: 0 npm records Sun 10 Apr 2022: 0 npm records Mon 11 Apr 2022: 0 npm records Tue 12 Apr 2022: 0 npm records Wed 13 Apr 2022: 0 npm records Thu 14 Apr 2022: 0 npm records Fri 15 Apr 2022: 0 npm records Sat 16 Apr 2022: 0 npm records Sun 17 Apr 2022: 0 npm records Mon 18 Apr 2022: 0 npm records Tue 19 Apr 2022: 0 npm records Wed 20 Apr 2022: 0 npm records Thu 21 Apr 2022: 0 npm records Fri 22 Apr 2022: 0 npm records Sat 23 Apr 2022: 0 npm records Sun 24 Apr 2022: 0 npm records Mon 25 Apr 2022: 0 npm records Tue 26 Apr 2022: 0 npm records Wed 27 Apr 2022: 0 npm records Thu 28 Apr 2022: 0 npm records Fri 29 Apr 2022: 0 npm records Sat 30 Apr 2022: 0 npm records Sun 01 May 2022: 0 npm records Mon 02 May 2022: 0 npm records Tue 03 May 2022: 0 npm records Wed 04 May 2022: 0 npm records Thu 05 May 2022: 0 npm records Fri 06 May 2022: 0 npm records Sat 07 May 2022: 0 npm records Sun 08 May 2022: 0 npm records Mon 09 May 2022: 1 npm record Tue 10 May 2022: 0 npm records Wed 11 May 2022: 1 npm record Thu 12 May 2022: 0 npm records Fri 13 May 2022: 1 npm record Sat 14 May 2022: 0 npm records Sun 15 May 2022: 0 npm records Mon 16 May 2022: 52 npm records Tue 17 May 2022: 23 npm records Wed 18 May 2022: 12 npm records Thu 19 May 2022: 8 npm records Fri 20 May 2022: 0 npm records Sat 21 May 2022: 0 npm records Sun 22 May 2022: 0 npm records Mon 23 May 2022: 2 npm records Tue 24 May 2022: 0 npm records Wed 25 May 2022: 0 npm records Thu 26 May 2022: 0 npm records Fri 27 May 2022: 0 npm records Sat 28 May 2022: 0 npm records Sun 29 May 2022: 0 npm records Mon 30 May 2022: 0 npm records Tue 31 May 2022: 96 npm records Wed 01 Jun 2022: 31 npm records Thu 02 Jun 2022: 20 npm records Fri 03 Jun 2022: 1 npm record Sat 04 Jun 2022: 0 npm records Sun 05 Jun 2022: 0 npm records Mon 06 Jun 2022: 0 npm records Tue 07 Jun 2022: 0 npm records Wed 08 Jun 2022: 61 npm records Thu 09 Jun 2022: 19 npm records Fri 10 Jun 2022: 5 npm records Sat 11 Jun 2022: 0 npm records Sun 12 Jun 2022: 0 npm records Mon 13 Jun 2022: 46 npm records Tue 14 Jun 2022: 12 npm records Wed 15 Jun 2022: 2 npm records Thu 16 Jun 2022: 0 npm records Fri 17 Jun 2022: 0 npm records Sat 18 Jun 2022: 0 npm records Sun 19 Jun 2022: 0 npm records Mon 20 Jun 2022: 4,691 npm records Tue 21 Jun 2022: 6 npm records Wed 22 Jun 2022: 20 npm records Thu 23 Jun 2022: 0 npm records Fri 24 Jun 2022: 0 npm records Sat 25 Jun 2022: 0 npm records Sun 26 Jun 2022: 0 npm records Mon 27 Jun 2022: 4 npm records Tue 28 Jun 2022: 0 npm records Wed 29 Jun 2022: 1 npm record Thu 30 Jun 2022: 24 npm records Fri 01 Jul 2022: 0 npm records Sat 02 Jul 2022: 0 npm records Sun 03 Jul 2022: 0 npm records Mon 04 Jul 2022: 0 npm records Tue 05 Jul 2022: 18 npm records Wed 06 Jul 2022: 27 npm records Thu 07 Jul 2022: 0 npm records Fri 08 Jul 2022: 28 npm records Sat 09 Jul 2022: 0 npm records Sun 10 Jul 2022: 0 npm records Mon 11 Jul 2022: 428 npm records Tue 12 Jul 2022: 34 npm records Wed 13 Jul 2022: 0 npm records Thu 14 Jul 2022: 4 npm records Fri 15 Jul 2022: 0 npm records Sat 16 Jul 2022: 0 npm records Sun 17 Jul 2022: 0 npm records Mon 18 Jul 2022: 22 npm records Tue 19 Jul 2022: 0 npm records Wed 20 Jul 2022: 19 npm records Thu 21 Jul 2022: 115 npm records Fri 22 Jul 2022: 14 npm records Sat 23 Jul 2022: 0 npm records Sun 24 Jul 2022: 0 npm records Mon 25 Jul 2022: 52 npm records Tue 26 Jul 2022: 44 npm records Wed 27 Jul 2022: 6 npm records Thu 28 Jul 2022: 0 npm records Fri 29 Jul 2022: 3 npm records Sat 30 Jul 2022: 0 npm records Sun 31 Jul 2022: 0 npm records Mon 01 Aug 2022: 0 npm records Tue 02 Aug 2022: 18 npm records Wed 03 Aug 2022: 2 npm records Thu 04 Aug 2022: 0 npm records Fri 05 Aug 2022: 5 npm records Sat 06 Aug 2022: 0 npm records Sun 07 Aug 2022: 0 npm records Mon 08 Aug 2022: 0 npm records Tue 09 Aug 2022: 4 npm records Wed 10 Aug 2022: 13 npm records Thu 11 Aug 2022: 0 npm records Fri 12 Aug 2022: 0 npm records Sat 13 Aug 2022: 0 npm records Sun 14 Aug 2022: 0 npm records Mon 15 Aug 2022: 3 npm records Tue 16 Aug 2022: 19 npm records Wed 17 Aug 2022: 11 npm records Thu 18 Aug 2022: 17 npm records Fri 19 Aug 2022: 948 npm records Sat 20 Aug 2022: 0 npm records Sun 21 Aug 2022: 0 npm records Mon 22 Aug 2022: 14 npm records Tue 23 Aug 2022: 2 npm records Wed 24 Aug 2022: 7 npm records Thu 25 Aug 2022: 3 npm records Fri 26 Aug 2022: 4 npm records Sat 27 Aug 2022: 0 npm records Sun 28 Aug 2022: 0 npm records Mon 29 Aug 2022: 1 npm record Tue 30 Aug 2022: 8 npm records Wed 31 Aug 2022: 0 npm records Thu 01 Sep 2022: 1 npm record Fri 02 Sep 2022: 4 npm records Sat 03 Sep 2022: 0 npm records Sun 04 Sep 2022: 0 npm records Mon 05 Sep 2022: 3 npm records Tue 06 Sep 2022: 2 npm records Wed 07 Sep 2022: 17 npm records Thu 08 Sep 2022: 10 npm records Fri 09 Sep 2022: 3 npm records Sat 10 Sep 2022: 0 npm records Sun 11 Sep 2022: 0 npm records Mon 12 Sep 2022: 11 npm records Tue 13 Sep 2022: 43 npm records Wed 14 Sep 2022: 25 npm records Thu 15 Sep 2022: 2 npm records Fri 16 Sep 2022: 1 npm record Sat 17 Sep 2022: 0 npm records Sun 18 Sep 2022: 2 npm records Mon 19 Sep 2022: 4 npm records Tue 20 Sep 2022: 0 npm records Wed 21 Sep 2022: 15 npm records Thu 22 Sep 2022: 1 npm record Fri 23 Sep 2022: 3 npm records Sat 24 Sep 2022: 0 npm records Sun 25 Sep 2022: 0 npm records Mon 26 Sep 2022: 12 npm records Tue 27 Sep 2022: 11 npm records Wed 28 Sep 2022: 3 npm records Thu 29 Sep 2022: 3 npm records Fri 30 Sep 2022: 0 npm records Sat 01 Oct 2022: 0 npm records Sun 02 Oct 2022: 0 npm records Mon 03 Oct 2022: 0 npm records Tue 04 Oct 2022: 3 npm records Wed 05 Oct 2022: 18 npm records Thu 06 Oct 2022: 0 npm records Fri 07 Oct 2022: 2 npm records Sat 08 Oct 2022: 0 npm records Sun 09 Oct 2022: 0 npm records Mon 10 Oct 2022: 1 npm record Tue 11 Oct 2022: 1 npm record Wed 12 Oct 2022: 1 npm record Thu 13 Oct 2022: 0 npm records Fri 14 Oct 2022: 0 npm records Sat 15 Oct 2022: 0 npm records Sun 16 Oct 2022: 0 npm records Mon 17 Oct 2022: 1 npm record Tue 18 Oct 2022: 0 npm records Wed 19 Oct 2022: 22 npm records Thu 20 Oct 2022: 6 npm records Fri 21 Oct 2022: 3 npm records Sat 22 Oct 2022: 0 npm records Sun 23 Oct 2022: 0 npm records Mon 24 Oct 2022: 17 npm records Tue 25 Oct 2022: 5 npm records Wed 26 Oct 2022: 2 npm records Thu 27 Oct 2022: 2 npm records Fri 28 Oct 2022: 2 npm records Sat 29 Oct 2022: 0 npm records Sun 30 Oct 2022: 0 npm records Mon 31 Oct 2022: 13 npm records Tue 01 Nov 2022: 0 npm records Wed 02 Nov 2022: 0 npm records Thu 03 Nov 2022: 2 npm records Fri 04 Nov 2022: 0 npm records Sat 05 Nov 2022: 0 npm records Sun 06 Nov 2022: 0 npm records Mon 07 Nov 2022: 14 npm records Tue 08 Nov 2022: 1 npm record Wed 09 Nov 2022: 4 npm records Thu 10 Nov 2022: 2 npm records Fri 11 Nov 2022: 0 npm records Sat 12 Nov 2022: 0 npm records Sun 13 Nov 2022: 0 npm records Mon 14 Nov 2022: 7 npm records Tue 15 Nov 2022: 3 npm records Wed 16 Nov 2022: 1 npm record Thu 17 Nov 2022: 3 npm records Fri 18 Nov 2022: 2 npm records Sat 19 Nov 2022: 0 npm records Sun 20 Nov 2022: 0 npm records Mon 21 Nov 2022: 2 npm records Tue 22 Nov 2022: 2 npm records Wed 23 Nov 2022: 2 npm records Thu 24 Nov 2022: 0 npm records Fri 25 Nov 2022: 2 npm records Sat 26 Nov 2022: 0 npm records Sun 27 Nov 2022: 0 npm records Mon 28 Nov 2022: 0 npm records Tue 29 Nov 2022: 5 npm records Wed 30 Nov 2022: 0 npm records Thu 01 Dec 2022: 0 npm records Fri 02 Dec 2022: 0 npm records Sat 03 Dec 2022: 0 npm records Sun 04 Dec 2022: 0 npm records Mon 05 Dec 2022: 4 npm records Tue 06 Dec 2022: 9 npm records Wed 07 Dec 2022: 11 npm records Thu 08 Dec 2022: 0 npm records Fri 09 Dec 2022: 1 npm record Sat 10 Dec 2022: 0 npm records Sun 11 Dec 2022: 0 npm records Mon 12 Dec 2022: 9 npm records Tue 13 Dec 2022: 2 npm records Wed 14 Dec 2022: 1 npm record Thu 15 Dec 2022: 2 npm records Fri 16 Dec 2022: 0 npm records Sat 17 Dec 2022: 0 npm records Sun 18 Dec 2022: 0 npm records Mon 19 Dec 2022: 3 npm records Tue 20 Dec 2022: 0 npm records Wed 21 Dec 2022: 2 npm records Thu 22 Dec 2022: 0 npm records Fri 23 Dec 2022: 0 npm records Sat 24 Dec 2022: 0 npm records Sun 25 Dec 2022: 0 npm records Mon 26 Dec 2022: 0 npm records Tue 27 Dec 2022: 0 npm records Wed 28 Dec 2022: 0 npm records Thu 29 Dec 2022: 20 npm records Fri 30 Dec 2022: 0 npm records Sat 31 Dec 2022: 0 npm records Sun 01 Jan 2023: 0 npm records Mon 02 Jan 2023: 0 npm records Tue 03 Jan 2023: 0 npm records Wed 04 Jan 2023: 0 npm records Thu 05 Jan 2023: 0 npm records Fri 06 Jan 2023: 1 npm record Sat 07 Jan 2023: 0 npm records Sun 08 Jan 2023: 0 npm records Mon 09 Jan 2023: 11 npm records Tue 10 Jan 2023: 36 npm records Wed 11 Jan 2023: 14 npm records Thu 12 Jan 2023: 0 npm records Fri 13 Jan 2023: 5 npm records Sat 14 Jan 2023: 0 npm records Sun 15 Jan 2023: 0 npm records Mon 16 Jan 2023: 2 npm records Tue 17 Jan 2023: 1 npm record Wed 18 Jan 2023: 20 npm records Thu 19 Jan 2023: 0 npm records Fri 20 Jan 2023: 4 npm records Sat 21 Jan 2023: 0 npm records Sun 22 Jan 2023: 0 npm records Mon 23 Jan 2023: 1 npm record Tue 24 Jan 2023: 3 npm records Wed 25 Jan 2023: 3 npm records Thu 26 Jan 2023: 6 npm records Fri 27 Jan 2023: 1 npm record Sat 28 Jan 2023: 0 npm records Sun 29 Jan 2023: 0 npm records Mon 30 Jan 2023: 102 npm records Tue 31 Jan 2023: 9 npm records Wed 01 Feb 2023: 1 npm record Thu 02 Feb 2023: 21 npm records Fri 03 Feb 2023: 7 npm records Sat 04 Feb 2023: 4 npm records Sun 05 Feb 2023: 6 npm records Mon 06 Feb 2023: 17 npm records Tue 07 Feb 2023: 8 npm records Wed 08 Feb 2023: 1 npm record Thu 09 Feb 2023: 13 npm records Fri 10 Feb 2023: 0 npm records Sat 11 Feb 2023: 0 npm records Sun 12 Feb 2023: 9 npm records Mon 13 Feb 2023: 2 npm records Tue 14 Feb 2023: 0 npm records Wed 15 Feb 2023: 0 npm records Thu 16 Feb 2023: 0 npm records Fri 17 Feb 2023: 0 npm records Sat 18 Feb 2023: 1 npm record Sun 19 Feb 2023: 0 npm records Mon 20 Feb 2023: 5 npm records Tue 21 Feb 2023: 1 npm record Wed 22 Feb 2023: 1 npm record Thu 23 Feb 2023: 17 npm records Fri 24 Feb 2023: 2 npm records Sat 25 Feb 2023: 9 npm records Sun 26 Feb 2023: 0 npm records Mon 27 Feb 2023: 4 npm records Tue 28 Feb 2023: 4 npm records Wed 01 Mar 2023: 6 npm records Thu 02 Mar 2023: 0 npm records Fri 03 Mar 2023: 0 npm records Sat 04 Mar 2023: 1 npm record Sun 05 Mar 2023: 0 npm records Mon 06 Mar 2023: 10 npm records Tue 07 Mar 2023: 5 npm records Wed 08 Mar 2023: 0 npm records Thu 09 Mar 2023: 0 npm records Fri 10 Mar 2023: 0 npm records Sat 11 Mar 2023: 0 npm records Sun 12 Mar 2023: 0 npm records Mon 13 Mar 2023: 0 npm records Tue 14 Mar 2023: 0 npm records Wed 15 Mar 2023: 27 npm records Thu 16 Mar 2023: 9 npm records Fri 17 Mar 2023: 0 npm records Sat 18 Mar 2023: 0 npm records Sun 19 Mar 2023: 0 npm records Mon 20 Mar 2023: 0 npm records Tue 21 Mar 2023: 2 npm records Wed 22 Mar 2023: 0 npm records Thu 23 Mar 2023: 7 npm records Fri 24 Mar 2023: 3 npm records Sat 25 Mar 2023: 0 npm records Sun 26 Mar 2023: 0 npm records Mon 27 Mar 2023: 0 npm records Tue 28 Mar 2023: 7 npm records Wed 29 Mar 2023: 7 npm records Thu 30 Mar 2023: 0 npm records Fri 31 Mar 2023: 27 npm records Sat 01 Apr 2023: 0 npm records Sun 02 Apr 2023: 0 npm records Mon 03 Apr 2023: 13 npm records Tue 04 Apr 2023: 3 npm records Wed 05 Apr 2023: 0 npm records Thu 06 Apr 2023: 4 npm records Fri 07 Apr 2023: 0 npm records Sat 08 Apr 2023: 0 npm records Sun 09 Apr 2023: 0 npm records Mon 10 Apr 2023: 0 npm records Tue 11 Apr 2023: 8 npm records Wed 12 Apr 2023: 16 npm records Thu 13 Apr 2023: 3 npm records Fri 14 Apr 2023: 0 npm records Sat 15 Apr 2023: 0 npm records Sun 16 Apr 2023: 0 npm records Mon 17 Apr 2023: 5 npm records Tue 18 Apr 2023: 7 npm records Wed 19 Apr 2023: 4 npm records Thu 20 Apr 2023: 11 npm records Fri 21 Apr 2023: 3 npm records Sat 22 Apr 2023: 0 npm records Sun 23 Apr 2023: 0 npm records Mon 24 Apr 2023: 3 npm records Tue 25 Apr 2023: 7 npm records Wed 26 Apr 2023: 15 npm records Thu 27 Apr 2023: 7 npm records Fri 28 Apr 2023: 7 npm records Sat 29 Apr 2023: 16 npm records Sun 30 Apr 2023: 3 npm records Mon 01 May 2023: 22 npm records Tue 02 May 2023: 7 npm records Wed 03 May 2023: 9 npm records Thu 04 May 2023: 10 npm records Fri 05 May 2023: 7 npm records Sat 06 May 2023: 0 npm records Sun 07 May 2023: 0 npm records Mon 08 May 2023: 5 npm records Tue 09 May 2023: 72 npm records Wed 10 May 2023: 89 npm records Thu 11 May 2023: 10 npm records Fri 12 May 2023: 10 npm records Sat 13 May 2023: 3 npm records Sun 14 May 2023: 3 npm records Mon 15 May 2023: 8 npm records Tue 16 May 2023: 3 npm records Wed 17 May 2023: 3 npm records Thu 18 May 2023: 6 npm records Fri 19 May 2023: 1 npm record Sat 20 May 2023: 2 npm records Sun 21 May 2023: 1 npm record Mon 22 May 2023: 2 npm records Tue 23 May 2023: 2 npm records Wed 24 May 2023: 7 npm records Thu 25 May 2023: 6 npm records Fri 26 May 2023: 2 npm records Sat 27 May 2023: 6 npm records Sun 28 May 2023: 4 npm records Mon 29 May 2023: 13 npm records Tue 30 May 2023: 2 npm records Wed 31 May 2023: 4 npm records Thu 01 Jun 2023: 6 npm records Fri 02 Jun 2023: 0 npm records Sat 03 Jun 2023: 7 npm records Sun 04 Jun 2023: 1 npm record Mon 05 Jun 2023: 17 npm records Tue 06 Jun 2023: 50 npm records Wed 07 Jun 2023: 2 npm records Thu 08 Jun 2023: 1 npm record Fri 09 Jun 2023: 1 npm record Sat 10 Jun 2023: 0 npm records Sun 11 Jun 2023: 0 npm records Mon 12 Jun 2023: 2 npm records Tue 13 Jun 2023: 14 npm records Wed 14 Jun 2023: 8 npm records Thu 15 Jun 2023: 5 npm records Fri 16 Jun 2023: 6 npm records Sat 17 Jun 2023: 1 npm record Sun 18 Jun 2023: 1 npm record Mon 19 Jun 2023: 10 npm records Tue 20 Jun 2023: 5 npm records Wed 21 Jun 2023: 10 npm records Thu 22 Jun 2023: 9 npm records Fri 23 Jun 2023: 4 npm records Sat 24 Jun 2023: 7 npm records Sun 25 Jun 2023: 0 npm records Mon 26 Jun 2023: 1 npm record Tue 27 Jun 2023: 3 npm records Wed 28 Jun 2023: 4 npm records Thu 29 Jun 2023: 5 npm records Fri 30 Jun 2023: 2 npm records Sat 01 Jul 2023: 1 npm record Sun 02 Jul 2023: 2 npm records Mon 03 Jul 2023: 6 npm records Tue 04 Jul 2023: 20 npm records Wed 05 Jul 2023: 3 npm records Thu 06 Jul 2023: 4 npm records Fri 07 Jul 2023: 1 npm record Sat 08 Jul 2023: 1 npm record Sun 09 Jul 2023: 5 npm records Mon 10 Jul 2023: 11 npm records Tue 11 Jul 2023: 7 npm records Wed 12 Jul 2023: 20 npm records Thu 13 Jul 2023: 1 npm record Fri 14 Jul 2023: 32 npm records Sat 15 Jul 2023: 1 npm record Sun 16 Jul 2023: 3 npm records Mon 17 Jul 2023: 8 npm records Tue 18 Jul 2023: 7 npm records Wed 19 Jul 2023: 3 npm records Thu 20 Jul 2023: 4 npm records Fri 21 Jul 2023: 4 npm records Sat 22 Jul 2023: 0 npm records Sun 23 Jul 2023: 0 npm records Mon 24 Jul 2023: 12 npm records Tue 25 Jul 2023: 15 npm records Wed 26 Jul 2023: 11 npm records Thu 27 Jul 2023: 13 npm records Fri 28 Jul 2023: 9 npm records Sat 29 Jul 2023: 2 npm records Sun 30 Jul 2023: 2 npm records Mon 31 Jul 2023: 37 npm records Tue 01 Aug 2023: 14 npm records Wed 02 Aug 2023: 4 npm records Thu 03 Aug 2023: 2 npm records Fri 04 Aug 2023: 3 npm records Sat 05 Aug 2023: 3 npm records Sun 06 Aug 2023: 2 npm records Mon 07 Aug 2023: 9 npm records Tue 08 Aug 2023: 14 npm records Wed 09 Aug 2023: 12 npm records Thu 10 Aug 2023: 7 npm records Fri 11 Aug 2023: 4 npm records Sat 12 Aug 2023: 0 npm records Sun 13 Aug 2023: 3 npm records Mon 14 Aug 2023: 16 npm records Tue 15 Aug 2023: 12 npm records Wed 16 Aug 2023: 10 npm records Thu 17 Aug 2023: 2 npm records Fri 18 Aug 2023: 0 npm records Sat 19 Aug 2023: 7 npm records Sun 20 Aug 2023: 13 npm records Mon 21 Aug 2023: 27 npm records Tue 22 Aug 2023: 12 npm records Wed 23 Aug 2023: 3 npm records Thu 24 Aug 2023: 21 npm records Fri 25 Aug 2023: 11 npm records Sat 26 Aug 2023: 3 npm records Sun 27 Aug 2023: 4 npm records Mon 28 Aug 2023: 13 npm records Tue 29 Aug 2023: 14 npm records Wed 30 Aug 2023: 2 npm records Thu 31 Aug 2023: 24 npm records Fri 01 Sep 2023: 14 npm records Sat 02 Sep 2023: 6 npm records Sun 03 Sep 2023: 2 npm records Mon 04 Sep 2023: 0 npm records Tue 05 Sep 2023: 5 npm records Wed 06 Sep 2023: 3 npm records Thu 07 Sep 2023: 1 npm record Fri 08 Sep 2023: 1 npm record Sat 09 Sep 2023: 1 npm record Sun 10 Sep 2023: 2 npm records Mon 11 Sep 2023: 24 npm records Tue 12 Sep 2023: 8 npm records Wed 13 Sep 2023: 4 npm records Thu 14 Sep 2023: 5 npm records Fri 15 Sep 2023: 2 npm records Sat 16 Sep 2023: 11 npm records Sun 17 Sep 2023: 4 npm records Mon 18 Sep 2023: 36 npm records Tue 19 Sep 2023: 25 npm records Wed 20 Sep 2023: 4 npm records Thu 21 Sep 2023: 28 npm records Fri 22 Sep 2023: 9 npm records Sat 23 Sep 2023: 0 npm records Sun 24 Sep 2023: 2 npm records Mon 25 Sep 2023: 14 npm records Tue 26 Sep 2023: 13 npm records Wed 27 Sep 2023: 5 npm records Thu 28 Sep 2023: 1 npm record Fri 29 Sep 2023: 3 npm records Sat 30 Sep 2023: 0 npm records Sun 01 Oct 2023: 1 npm record Mon 02 Oct 2023: 15 npm records Tue 03 Oct 2023: 8 npm records Wed 04 Oct 2023: 3 npm records Thu 05 Oct 2023: 10 npm records Fri 06 Oct 2023: 1 npm record Sat 07 Oct 2023: 0 npm records Sun 08 Oct 2023: 1 npm record Mon 09 Oct 2023: 9 npm records Tue 10 Oct 2023: 6 npm records Wed 11 Oct 2023: 4 npm records Thu 12 Oct 2023: 19 npm records Fri 13 Oct 2023: 7 npm records Sat 14 Oct 2023: 0 npm records Sun 15 Oct 2023: 3 npm records Mon 16 Oct 2023: 8 npm records Tue 17 Oct 2023: 0 npm records Wed 18 Oct 2023: 0 npm records Thu 19 Oct 2023: 2 npm records Fri 20 Oct 2023: 1 npm record Sat 21 Oct 2023: 1 npm record Sun 22 Oct 2023: 0 npm records Mon 23 Oct 2023: 3 npm records Tue 24 Oct 2023: 3 npm records Wed 25 Oct 2023: 2 npm records Thu 26 Oct 2023: 0 npm records Fri 27 Oct 2023: 2 npm records Sat 28 Oct 2023: 2 npm records Sun 29 Oct 2023: 1 npm record Mon 30 Oct 2023: 2 npm records Tue 31 Oct 2023: 4 npm records Wed 01 Nov 2023: 10 npm records Thu 02 Nov 2023: 5 npm records Fri 03 Nov 2023: 1 npm record Sat 04 Nov 2023: 2 npm records Sun 05 Nov 2023: 12 npm records Mon 06 Nov 2023: 24 npm records Tue 07 Nov 2023: 13 npm records Wed 08 Nov 2023: 5 npm records Thu 09 Nov 2023: 14 npm records Fri 10 Nov 2023: 6 npm records Sat 11 Nov 2023: 3 npm records Sun 12 Nov 2023: 1 npm record Mon 13 Nov 2023: 4 npm records Tue 14 Nov 2023: 2 npm records Wed 15 Nov 2023: 3 npm records Thu 16 Nov 2023: 4 npm records Fri 17 Nov 2023: 8 npm records Sat 18 Nov 2023: 7 npm records Sun 19 Nov 2023: 2 npm records Mon 20 Nov 2023: 6 npm records Tue 21 Nov 2023: 16 npm records Wed 22 Nov 2023: 1 npm record Thu 23 Nov 2023: 14 npm records Fri 24 Nov 2023: 9 npm records Sat 25 Nov 2023: 5 npm records Sun 26 Nov 2023: 0 npm records Mon 27 Nov 2023: 0 npm records Tue 28 Nov 2023: 7 npm records Wed 29 Nov 2023: 10 npm records Thu 30 Nov 2023: 9 npm records Fri 01 Dec 2023: 5 npm records Sat 02 Dec 2023: 2 npm records Sun 03 Dec 2023: 3 npm records Mon 04 Dec 2023: 7 npm records Tue 05 Dec 2023: 3 npm records Wed 06 Dec 2023: 4 npm records Thu 07 Dec 2023: 3 npm records Fri 08 Dec 2023: 3 npm records Sat 09 Dec 2023: 2 npm records Sun 10 Dec 2023: 1 npm record Mon 11 Dec 2023: 8 npm records Tue 12 Dec 2023: 2 npm records Wed 13 Dec 2023: 2 npm records Thu 14 Dec 2023: 7 npm records Fri 15 Dec 2023: 4 npm records Sat 16 Dec 2023: 2 npm records Sun 17 Dec 2023: 0 npm records Mon 18 Dec 2023: 3 npm records Tue 19 Dec 2023: 17 npm records Wed 20 Dec 2023: 6 npm records Thu 21 Dec 2023: 2 npm records Fri 22 Dec 2023: 8 npm records Sat 23 Dec 2023: 1 npm record Sun 24 Dec 2023: 2 npm records Mon 25 Dec 2023: 0 npm records Tue 26 Dec 2023: 3 npm records Wed 27 Dec 2023: 4 npm records Thu 28 Dec 2023: 8 npm records Fri 29 Dec 2023: 6 npm records Sat 30 Dec 2023: 2 npm records Sun 31 Dec 2023: 2 npm records Mon 01 Jan 2024: 5 npm records Tue 02 Jan 2024: 15 npm records Wed 03 Jan 2024: 9 npm records Thu 04 Jan 2024: 2 npm records Fri 05 Jan 2024: 6 npm records Sat 06 Jan 2024: 7 npm records Sun 07 Jan 2024: 8 npm records Mon 08 Jan 2024: 5 npm records Tue 09 Jan 2024: 2 npm records Wed 10 Jan 2024: 7 npm records Thu 11 Jan 2024: 16 npm records Fri 12 Jan 2024: 3 npm records Sat 13 Jan 2024: 5 npm records Sun 14 Jan 2024: 11 npm records Mon 15 Jan 2024: 8 npm records Tue 16 Jan 2024: 4 npm records Wed 17 Jan 2024: 17 npm records Thu 18 Jan 2024: 4 npm records Fri 19 Jan 2024: 0 npm records Sat 20 Jan 2024: 1 npm record Sun 21 Jan 2024: 9 npm records Mon 22 Jan 2024: 13 npm records Tue 23 Jan 2024: 5 npm records Wed 24 Jan 2024: 750 npm records Thu 25 Jan 2024: 3 npm records Fri 26 Jan 2024: 0 npm records Sat 27 Jan 2024: 1 npm record Sun 28 Jan 2024: 4 npm records Mon 29 Jan 2024: 26 npm records Tue 30 Jan 2024: 2 npm records Wed 31 Jan 2024: 6 npm records Thu 01 Feb 2024: 0 npm records Fri 02 Feb 2024: 6 npm records Sat 03 Feb 2024: 2 npm records Sun 04 Feb 2024: 1 npm record Mon 05 Feb 2024: 5 npm records Tue 06 Feb 2024: 3 npm records Wed 07 Feb 2024: 12 npm records Thu 08 Feb 2024: 1 npm record Fri 09 Feb 2024: 2 npm records Sat 10 Feb 2024: 3 npm records Sun 11 Feb 2024: 1 npm record Mon 12 Feb 2024: 8 npm records Tue 13 Feb 2024: 1 npm record Wed 14 Feb 2024: 3 npm records Thu 15 Feb 2024: 7 npm records Fri 16 Feb 2024: 1 npm record Sat 17 Feb 2024: 0 npm records Sun 18 Feb 2024: 6 npm records Mon 19 Feb 2024: 6 npm records Tue 20 Feb 2024: 5 npm records Wed 21 Feb 2024: 6 npm records Thu 22 Feb 2024: 2 npm records Fri 23 Feb 2024: 0 npm records Sat 24 Feb 2024: 1 npm record Sun 25 Feb 2024: 0 npm records Mon 26 Feb 2024: 1 npm record Tue 27 Feb 2024: 4 npm records Wed 28 Feb 2024: 2 npm records Thu 29 Feb 2024: 3 npm records Fri 01 Mar 2024: 2 npm records Sat 02 Mar 2024: 1 npm record Sun 03 Mar 2024: 2 npm records Mon 04 Mar 2024: 0 npm records Tue 05 Mar 2024: 1 npm record Wed 06 Mar 2024: 2 npm records Thu 07 Mar 2024: 2 npm records Fri 08 Mar 2024: 6 npm records Sat 09 Mar 2024: 8 npm records Sun 10 Mar 2024: 3 npm records Mon 11 Mar 2024: 1 npm record Tue 12 Mar 2024: 14 npm records Wed 13 Mar 2024: 3 npm records Thu 14 Mar 2024: 2 npm records Fri 15 Mar 2024: 6 npm records Sat 16 Mar 2024: 1 npm record Sun 17 Mar 2024: 3 npm records Mon 18 Mar 2024: 15 npm records Tue 19 Mar 2024: 8 npm records Wed 20 Mar 2024: 0 npm records Thu 21 Mar 2024: 6 npm records Fri 22 Mar 2024: 0 npm records Sat 23 Mar 2024: 0 npm records Sun 24 Mar 2024: 8 npm records Mon 25 Mar 2024: 0 npm records Tue 26 Mar 2024: 2 npm records Wed 27 Mar 2024: 8 npm records Thu 28 Mar 2024: 0 npm records Fri 29 Mar 2024: 4 npm records Sat 30 Mar 2024: 1 npm record Sun 31 Mar 2024: 8 npm records Mon 01 Apr 2024: 4 npm records Tue 02 Apr 2024: 9 npm records Wed 03 Apr 2024: 7 npm records Thu 04 Apr 2024: 4 npm records Fri 05 Apr 2024: 1 npm record Sat 06 Apr 2024: 1 npm record Sun 07 Apr 2024: 0 npm records Mon 08 Apr 2024: 8 npm records Tue 09 Apr 2024: 0 npm records Wed 10 Apr 2024: 41 npm records Thu 11 Apr 2024: 0 npm records Fri 12 Apr 2024: 0 npm records Sat 13 Apr 2024: 0 npm records Sun 14 Apr 2024: 0 npm records Mon 15 Apr 2024: 12 npm records Tue 16 Apr 2024: 5 npm records Wed 17 Apr 2024: 4 npm records Thu 18 Apr 2024: 3 npm records Fri 19 Apr 2024: 1 npm record Sat 20 Apr 2024: 0 npm records Sun 21 Apr 2024: 0 npm records Mon 22 Apr 2024: 17 npm records Tue 23 Apr 2024: 2 npm records Wed 24 Apr 2024: 5 npm records Thu 25 Apr 2024: 0 npm records Fri 26 Apr 2024: 0 npm records Sat 27 Apr 2024: 0 npm records Sun 28 Apr 2024: 0 npm records Mon 29 Apr 2024: 5 npm records Tue 30 Apr 2024: 5 npm records Wed 01 May 2024: 4 npm records Thu 02 May 2024: 7 npm records Fri 03 May 2024: 3 npm records Sat 04 May 2024: 3 npm records Sun 05 May 2024: 2 npm records Mon 06 May 2024: 8 npm records Tue 07 May 2024: 0 npm records Wed 08 May 2024: 10 npm records Thu 09 May 2024: 3 npm records Fri 10 May 2024: 0 npm records Sat 11 May 2024: 1 npm record Sun 12 May 2024: 0 npm records Mon 13 May 2024: 7 npm records Tue 14 May 2024: 0 npm records Wed 15 May 2024: 1 npm record Thu 16 May 2024: 0 npm records Fri 17 May 2024: 0 npm records Sat 18 May 2024: 0 npm records Sun 19 May 2024: 3 npm records Mon 20 May 2024: 9 npm records Tue 21 May 2024: 2 npm records Wed 22 May 2024: 0 npm records Thu 23 May 2024: 0 npm records Fri 24 May 2024: 2 npm records Sat 25 May 2024: 2 npm records Sun 26 May 2024: 0 npm records Mon 27 May 2024: 2 npm records Tue 28 May 2024: 2 npm records Wed 29 May 2024: 2 npm records Thu 30 May 2024: 5 npm records Fri 31 May 2024: 1 npm record Sat 01 Jun 2024: 0 npm records Sun 02 Jun 2024: 4 npm records Mon 03 Jun 2024: 127 npm records Tue 04 Jun 2024: 4 npm records Wed 05 Jun 2024: 4 npm records Thu 06 Jun 2024: 6 npm records Fri 07 Jun 2024: 6 npm records Sat 08 Jun 2024: 4 npm records Sun 09 Jun 2024: 5 npm records Mon 10 Jun 2024: 4 npm records Tue 11 Jun 2024: 21 npm records Wed 12 Jun 2024: 18 npm records Thu 13 Jun 2024: 7 npm records Fri 14 Jun 2024: 3 npm records Sat 15 Jun 2024: 1 npm record Sun 16 Jun 2024: 0 npm records Mon 17 Jun 2024: 6 npm records Tue 18 Jun 2024: 15 npm records Wed 19 Jun 2024: 2 npm records Thu 20 Jun 2024: 14 npm records Fri 21 Jun 2024: 0 npm records Sat 22 Jun 2024: 1 npm record Sun 23 Jun 2024: 2 npm records Mon 24 Jun 2024: 3 npm records Tue 25 Jun 2024: 2,283 npm records Wed 26 Jun 2024: 4 npm records Thu 27 Jun 2024: 6 npm records Fri 28 Jun 2024: 9 npm records Sat 29 Jun 2024: 3 npm records Sun 30 Jun 2024: 1 npm record Mon 01 Jul 2024: 7 npm records Tue 02 Jul 2024: 2 npm records Wed 03 Jul 2024: 9 npm records Thu 04 Jul 2024: 317 npm records Fri 05 Jul 2024: 3 npm records Sat 06 Jul 2024: 9 npm records Sun 07 Jul 2024: 0 npm records Mon 08 Jul 2024: 7 npm records Tue 09 Jul 2024: 5 npm records Wed 10 Jul 2024: 5 npm records Thu 11 Jul 2024: 286 npm records Fri 12 Jul 2024: 12 npm records Sat 13 Jul 2024: 4 npm records Sun 14 Jul 2024: 3 npm records Mon 15 Jul 2024: 10 npm records Tue 16 Jul 2024: 8 npm records Wed 17 Jul 2024: 4 npm records Thu 18 Jul 2024: 4 npm records Fri 19 Jul 2024: 2 npm records Sat 20 Jul 2024: 2 npm records Sun 21 Jul 2024: 4 npm records Mon 22 Jul 2024: 11 npm records Tue 23 Jul 2024: 2 npm records Wed 24 Jul 2024: 6 npm records Thu 25 Jul 2024: 10 npm records Fri 26 Jul 2024: 0 npm records Sat 27 Jul 2024: 17 npm records Sun 28 Jul 2024: 7 npm records Mon 29 Jul 2024: 13 npm records Tue 30 Jul 2024: 3 npm records Wed 31 Jul 2024: 13 npm records Thu 01 Aug 2024: 16 npm records Fri 02 Aug 2024: 0 npm records Sat 03 Aug 2024: 0 npm records Sun 04 Aug 2024: 0 npm records Mon 05 Aug 2024: 10 npm records Tue 06 Aug 2024: 9 npm records Wed 07 Aug 2024: 104 npm records Thu 08 Aug 2024: 1 npm record Fri 09 Aug 2024: 3 npm records Sat 10 Aug 2024: 1 npm record Sun 11 Aug 2024: 4 npm records Mon 12 Aug 2024: 1 npm record Tue 13 Aug 2024: 0 npm records Wed 14 Aug 2024: 0 npm records Thu 15 Aug 2024: 0 npm records Fri 16 Aug 2024: 0 npm records Sat 17 Aug 2024: 0 npm records Sun 18 Aug 2024: 0 npm records Mon 19 Aug 2024: 0 npm records Tue 20 Aug 2024: 0 npm records Wed 21 Aug 2024: 0 npm records Thu 22 Aug 2024: 0 npm records Fri 23 Aug 2024: 0 npm records Sat 24 Aug 2024: 0 npm records Sun 25 Aug 2024: 0 npm records Mon 26 Aug 2024: 17 npm records Tue 27 Aug 2024: 2 npm records Wed 28 Aug 2024: 15 npm records Thu 29 Aug 2024: 27 npm records Fri 30 Aug 2024: 4 npm records Sat 31 Aug 2024: 0 npm records Sun 01 Sep 2024: 0 npm records Mon 02 Sep 2024: 609 npm records Tue 03 Sep 2024: 21 npm records Wed 04 Sep 2024: 90 npm records Thu 05 Sep 2024: 13 npm records Fri 06 Sep 2024: 4 npm records Sat 07 Sep 2024: 6 npm records Sun 08 Sep 2024: 11 npm records Mon 09 Sep 2024: 9 npm records Tue 10 Sep 2024: 5 npm records Wed 11 Sep 2024: 12 npm records Thu 12 Sep 2024: 0 npm records Fri 13 Sep 2024: 0 npm records Sat 14 Sep 2024: 0 npm records Sun 15 Sep 2024: 0 npm records Mon 16 Sep 2024: 9 npm records Tue 17 Sep 2024: 11 npm records Wed 18 Sep 2024: 17 npm records Thu 19 Sep 2024: 11 npm records Fri 20 Sep 2024: 8 npm records Sat 21 Sep 2024: 10 npm records Sun 22 Sep 2024: 3 npm records Mon 23 Sep 2024: 7 npm records Tue 24 Sep 2024: 7 npm records Wed 25 Sep 2024: 18 npm records Thu 26 Sep 2024: 11 npm records Fri 27 Sep 2024: 25 npm records Sat 28 Sep 2024: 20 npm records Sun 29 Sep 2024: 6 npm records Mon 30 Sep 2024: 10 npm records Tue 01 Oct 2024: 14 npm records Wed 02 Oct 2024: 9 npm records Thu 03 Oct 2024: 8 npm records Fri 04 Oct 2024: 9 npm records Sat 05 Oct 2024: 7 npm records Sun 06 Oct 2024: 0 npm records Mon 07 Oct 2024: 8 npm records Tue 08 Oct 2024: 9 npm records Wed 09 Oct 2024: 99 npm records Thu 10 Oct 2024: 45 npm records Fri 11 Oct 2024: 10 npm records Sat 12 Oct 2024: 6 npm records Sun 13 Oct 2024: 2 npm records Mon 14 Oct 2024: 9 npm records Tue 15 Oct 2024: 4 npm records Wed 16 Oct 2024: 569 npm records Thu 17 Oct 2024: 18 npm records Fri 18 Oct 2024: 8 npm records Sat 19 Oct 2024: 4 npm records Sun 20 Oct 2024: 0 npm records Mon 21 Oct 2024: 6 npm records Tue 22 Oct 2024: 12 npm records Wed 23 Oct 2024: 3 npm records Thu 24 Oct 2024: 8 npm records Fri 25 Oct 2024: 0 npm records Sat 26 Oct 2024: 2 npm records Sun 27 Oct 2024: 1 npm record Mon 28 Oct 2024: 15 npm records Tue 29 Oct 2024: 10 npm records Wed 30 Oct 2024: 31 npm records Thu 31 Oct 2024: 6 npm records Fri 01 Nov 2024: 7 npm records Sat 02 Nov 2024: 7 npm records Sun 03 Nov 2024: 12 npm records Mon 04 Nov 2024: 18 npm records Tue 05 Nov 2024: 36 npm records Wed 06 Nov 2024: 27 npm records Thu 07 Nov 2024: 55 npm records Fri 08 Nov 2024: 29 npm records Sat 09 Nov 2024: 2 npm records Sun 10 Nov 2024: 12 npm records Mon 11 Nov 2024: 4 npm records Tue 12 Nov 2024: 35 npm records Wed 13 Nov 2024: 36 npm records Thu 14 Nov 2024: 42 npm records Fri 15 Nov 2024: 34 npm records Sat 16 Nov 2024: 32 npm records Sun 17 Nov 2024: 6 npm records Mon 18 Nov 2024: 5 npm records Tue 19 Nov 2024: 3 npm records Wed 20 Nov 2024: 24 npm records Thu 21 Nov 2024: 9 npm records Fri 22 Nov 2024: 10 npm records Sat 23 Nov 2024: 7 npm records Sun 24 Nov 2024: 13 npm records Mon 25 Nov 2024: 42 npm records Tue 26 Nov 2024: 26 npm records Wed 27 Nov 2024: 140 npm records Thu 28 Nov 2024: 10 npm records Fri 29 Nov 2024: 30 npm records Sat 30 Nov 2024: 3 npm records Sun 01 Dec 2024: 18 npm records Mon 02 Dec 2024: 4 npm records Tue 03 Dec 2024: 3 npm records Wed 04 Dec 2024: 15 npm records Thu 05 Dec 2024: 18 npm records Fri 06 Dec 2024: 7 npm records Sat 07 Dec 2024: 12 npm records Sun 08 Dec 2024: 101 npm records Mon 09 Dec 2024: 181 npm records Tue 10 Dec 2024: 19 npm records Wed 11 Dec 2024: 14 npm records Thu 12 Dec 2024: 27 npm records Fri 13 Dec 2024: 18 npm records Sat 14 Dec 2024: 23 npm records Sun 15 Dec 2024: 14 npm records Mon 16 Dec 2024: 18 npm records Tue 17 Dec 2024: 18 npm records Wed 18 Dec 2024: 16 npm records Thu 19 Dec 2024: 147 npm records Fri 20 Dec 2024: 17 npm records Sat 21 Dec 2024: 9 npm records Sun 22 Dec 2024: 7 npm records Mon 23 Dec 2024: 15 npm records Tue 24 Dec 2024: 7 npm records Wed 25 Dec 2024: 8 npm records Thu 26 Dec 2024: 6 npm records Fri 27 Dec 2024: 18 npm records Sat 28 Dec 2024: 0 npm records Sun 29 Dec 2024: 3 npm records Mon 30 Dec 2024: 6 npm records Tue 31 Dec 2024: 9 npm records Wed 01 Jan 2025: 1 npm record Thu 02 Jan 2025: 19 npm records Fri 03 Jan 2025: 6 npm records Sat 04 Jan 2025: 3 npm records Sun 05 Jan 2025: 4 npm records Mon 06 Jan 2025: 8 npm records Tue 07 Jan 2025: 10 npm records Wed 08 Jan 2025: 9 npm records Thu 09 Jan 2025: 1 npm record Fri 10 Jan 2025: 4 npm records Sat 11 Jan 2025: 0 npm records Sun 12 Jan 2025: 2 npm records Mon 13 Jan 2025: 20 npm records Tue 14 Jan 2025: 30 npm records Wed 15 Jan 2025: 4 npm records Thu 16 Jan 2025: 2 npm records Fri 17 Jan 2025: 0 npm records Sat 18 Jan 2025: 4 npm records Sun 19 Jan 2025: 9 npm records Mon 20 Jan 2025: 122 npm records Tue 21 Jan 2025: 67 npm records Wed 22 Jan 2025: 27 npm records Thu 23 Jan 2025: 19 npm records Fri 24 Jan 2025: 215 npm records Sat 25 Jan 2025: 3 npm records Sun 26 Jan 2025: 4 npm records Mon 27 Jan 2025: 4 npm records Tue 28 Jan 2025: 11 npm records Wed 29 Jan 2025: 6 npm records Thu 30 Jan 2025: 79 npm records Fri 31 Jan 2025: 50 npm records Sat 01 Feb 2025: 3 npm records Sun 02 Feb 2025: 0 npm records Mon 03 Feb 2025: 364 npm records Tue 04 Feb 2025: 0 npm records Wed 05 Feb 2025: 0 npm records Thu 06 Feb 2025: 0 npm records Fri 07 Feb 2025: 27 npm records Sat 08 Feb 2025: 2 npm records Sun 09 Feb 2025: 0 npm records Mon 10 Feb 2025: 5 npm records Tue 11 Feb 2025: 18 npm records Wed 12 Feb 2025: 5 npm records Thu 13 Feb 2025: 88 npm records Fri 14 Feb 2025: 0 npm records Sat 15 Feb 2025: 0 npm records Sun 16 Feb 2025: 0 npm records Mon 17 Feb 2025: 75 npm records Tue 18 Feb 2025: 13 npm records Wed 19 Feb 2025: 34 npm records Thu 20 Feb 2025: 3 npm records Fri 21 Feb 2025: 7 npm records Sat 22 Feb 2025: 5 npm records Sun 23 Feb 2025: 38 npm records Mon 24 Feb 2025: 0 npm records Tue 25 Feb 2025: 0 npm records Wed 26 Feb 2025: 0 npm records Thu 27 Feb 2025: 2 npm records Fri 28 Feb 2025: 86 npm records Sat 01 Mar 2025: 17 npm records Sun 02 Mar 2025: 9 npm records Mon 03 Mar 2025: 336 npm records Tue 04 Mar 2025: 89 npm records Wed 05 Mar 2025: 54 npm records Thu 06 Mar 2025: 17 npm records Fri 07 Mar 2025: 0 npm records Sat 08 Mar 2025: 1 npm record Sun 09 Mar 2025: 0 npm records Mon 10 Mar 2025: 6 npm records Tue 11 Mar 2025: 56 npm records Wed 12 Mar 2025: 53 npm records Thu 13 Mar 2025: 8 npm records Fri 14 Mar 2025: 92 npm records Sat 15 Mar 2025: 3 npm records Sun 16 Mar 2025: 3 npm records Mon 17 Mar 2025: 34 npm records Tue 18 Mar 2025: 55 npm records Wed 19 Mar 2025: 11 npm records Thu 20 Mar 2025: 28 npm records Fri 21 Mar 2025: 3 npm records Sat 22 Mar 2025: 1 npm record Sun 23 Mar 2025: 3 npm records Mon 24 Mar 2025: 13 npm records Tue 25 Mar 2025: 103 npm records Wed 26 Mar 2025: 5 npm records Thu 27 Mar 2025: 5 npm records Fri 28 Mar 2025: 168 npm records Sat 29 Mar 2025: 4 npm records Sun 30 Mar 2025: 7 npm records Mon 31 Mar 2025: 11 npm records Tue 01 Apr 2025: 3 npm records Wed 02 Apr 2025: 55 npm records Thu 03 Apr 2025: 44 npm records Fri 04 Apr 2025: 6 npm records Sat 05 Apr 2025: 3 npm records Sun 06 Apr 2025: 3 npm records Mon 07 Apr 2025: 30 npm records Tue 08 Apr 2025: 8 npm records Wed 09 Apr 2025: 29 npm records Thu 10 Apr 2025: 0 npm records Fri 11 Apr 2025: 1 npm record Sat 12 Apr 2025: 0 npm records Sun 13 Apr 2025: 0 npm records Mon 14 Apr 2025: 0 npm records Tue 15 Apr 2025: 4 npm records Wed 16 Apr 2025: 8 npm records Thu 17 Apr 2025: 47 npm records Fri 18 Apr 2025: 1 npm record Sat 19 Apr 2025: 8 npm records Sun 20 Apr 2025: 1 npm record Mon 21 Apr 2025: 1 npm record Tue 22 Apr 2025: 2 npm records Wed 23 Apr 2025: 133 npm records Thu 24 Apr 2025: 8 npm records Fri 25 Apr 2025: 10 npm records Sat 26 Apr 2025: 4 npm records Sun 27 Apr 2025: 0 npm records Mon 28 Apr 2025: 22 npm records Tue 29 Apr 2025: 30 npm records Wed 30 Apr 2025: 17 npm records Thu 01 May 2025: 10 npm records Fri 02 May 2025: 21 npm records Sat 03 May 2025: 4 npm records Sun 04 May 2025: 4 npm records Mon 05 May 2025: 34 npm records Tue 06 May 2025: 50 npm records Wed 07 May 2025: 36 npm records Thu 08 May 2025: 7 npm records Fri 09 May 2025: 4 npm records Sat 10 May 2025: 11 npm records Sun 11 May 2025: 8 npm records Mon 12 May 2025: 27 npm records Tue 13 May 2025: 7 npm records Wed 14 May 2025: 19 npm records Thu 15 May 2025: 62 npm records Fri 16 May 2025: 68 npm records Sat 17 May 2025: 7 npm records Sun 18 May 2025: 14 npm records Mon 19 May 2025: 72 npm records Tue 20 May 2025: 9 npm records Wed 21 May 2025: 88 npm records Thu 22 May 2025: 76 npm records Fri 23 May 2025: 134 npm records Sat 24 May 2025: 5 npm records Sun 25 May 2025: 6 npm records Mon 26 May 2025: 69 npm records Tue 27 May 2025: 59 npm records Wed 28 May 2025: 14 npm records Thu 29 May 2025: 7 npm records Fri 30 May 2025: 15 npm records Sat 31 May 2025: 15 npm records Sun 01 Jun 2025: 11 npm records Mon 02 Jun 2025: 18 npm records Tue 03 Jun 2025: 14 npm records Wed 04 Jun 2025: 44 npm records Thu 05 Jun 2025: 8 npm records Fri 06 Jun 2025: 16 npm records Sat 07 Jun 2025: 29 npm records Sun 08 Jun 2025: 2 npm records Mon 09 Jun 2025: 12 npm records Tue 10 Jun 2025: 142 npm records Wed 11 Jun 2025: 12 npm records Thu 12 Jun 2025: 32 npm records Fri 13 Jun 2025: 29 npm records Sat 14 Jun 2025: 9 npm records Sun 15 Jun 2025: 31 npm records Mon 16 Jun 2025: 16 npm records Tue 17 Jun 2025: 26 npm records Wed 18 Jun 2025: 86 npm records Thu 19 Jun 2025: 19 npm records Fri 20 Jun 2025: 23 npm records Sat 21 Jun 2025: 4 npm records Sun 22 Jun 2025: 5 npm records Mon 23 Jun 2025: 20 npm records Tue 24 Jun 2025: 18 npm records Wed 25 Jun 2025: 49 npm records Thu 26 Jun 2025: 34 npm records Fri 27 Jun 2025: 18 npm records Sat 28 Jun 2025: 29 npm records Sun 29 Jun 2025: 18 npm records Mon 30 Jun 2025: 28 npm records Tue 01 Jul 2025: 49 npm records Wed 02 Jul 2025: 62 npm records Thu 03 Jul 2025: 32 npm records Fri 04 Jul 2025: 26 npm records Sat 05 Jul 2025: 21 npm records Sun 06 Jul 2025: 11 npm records Mon 07 Jul 2025: 4 npm records Tue 08 Jul 2025: 59 npm records Wed 09 Jul 2025: 32 npm records Thu 10 Jul 2025: 51 npm records Fri 11 Jul 2025: 7 npm records Sat 12 Jul 2025: 18 npm records Sun 13 Jul 2025: 10 npm records Mon 14 Jul 2025: 25 npm records Tue 15 Jul 2025: 120 npm records Wed 16 Jul 2025: 15 npm records Thu 17 Jul 2025: 21 npm records Fri 18 Jul 2025: 7 npm records Sat 19 Jul 2025: 4 npm records Sun 20 Jul 2025: 41 npm records Mon 21 Jul 2025: 22 npm records Tue 22 Jul 2025: 86 npm records Wed 23 Jul 2025: 32 npm records Thu 24 Jul 2025: 35 npm records Fri 25 Jul 2025: 24 npm records Sat 26 Jul 2025: 20 npm records Sun 27 Jul 2025: 0 npm records Mon 28 Jul 2025: 35 npm records Tue 29 Jul 2025: 13 npm records Wed 30 Jul 2025: 68 npm records Thu 31 Jul 2025: 80 npm records Fri 01 Aug 2025: 22 npm records Sat 02 Aug 2025: 8 npm records Sun 03 Aug 2025: 16 npm records Mon 04 Aug 2025: 8 npm records Tue 05 Aug 2025: 6 npm records Wed 06 Aug 2025: 13 npm records Thu 07 Aug 2025: 6 npm records Fri 08 Aug 2025: 16 npm records Sat 09 Aug 2025: 8 npm records Sun 10 Aug 2025: 3 npm records Mon 11 Aug 2025: 16 npm records Tue 12 Aug 2025: 10 npm records Wed 13 Aug 2025: 29 npm records Thu 14 Aug 2025: 34,202 npm records Fri 15 Aug 2025: 12 npm records Sat 16 Aug 2025: 3 npm records Sun 17 Aug 2025: 25 npm records Mon 18 Aug 2025: 1 npm record Tue 19 Aug 2025: 25 npm records Wed 20 Aug 2025: 8 npm records Thu 21 Aug 2025: 25 npm records Fri 22 Aug 2025: 20 npm records Sat 23 Aug 2025: 104 npm records Sun 24 Aug 2025: 2 npm records Mon 25 Aug 2025: 90 npm records Tue 26 Aug 2025: 6 npm records Wed 27 Aug 2025: 13 npm records Thu 28 Aug 2025: 218 npm records Fri 29 Aug 2025: 178 npm records Sat 30 Aug 2025: 3 npm records Sun 31 Aug 2025: 3 npm records Mon 01 Sep 2025: 12 npm records Tue 02 Sep 2025: 7 npm records Wed 03 Sep 2025: 1 npm record Thu 04 Sep 2025: 10 npm records Fri 05 Sep 2025: 4,726 npm records Sat 06 Sep 2025: 1 npm record Sun 07 Sep 2025: 0 npm records Mon 08 Sep 2025: 20 npm records Tue 09 Sep 2025: 41 npm records Wed 10 Sep 2025: 30 npm records Thu 11 Sep 2025: 56 npm records Fri 12 Sep 2025: 9 npm records Sat 13 Sep 2025: 6 npm records Sun 14 Sep 2025: 1 npm record Mon 15 Sep 2025: 86 npm records Tue 16 Sep 2025: 200 npm records Wed 17 Sep 2025: 33 npm records Thu 18 Sep 2025: 5 npm records Fri 19 Sep 2025: 13 npm records Sat 20 Sep 2025: 0 npm records Sun 21 Sep 2025: 0 npm records Mon 22 Sep 2025: 39 npm records Tue 23 Sep 2025: 23 npm records Wed 24 Sep 2025: 8 npm records Thu 25 Sep 2025: 61 npm records Fri 26 Sep 2025: 160 npm records Sat 27 Sep 2025: 4 npm records Sun 28 Sep 2025: 3 npm records Mon 29 Sep 2025: 20 npm records Tue 30 Sep 2025: 4 npm records Wed 01 Oct 2025: 2 npm records Thu 02 Oct 2025: 27 npm records Fri 03 Oct 2025: 6 npm records Sat 04 Oct 2025: 21 npm records Sun 05 Oct 2025: 2 npm records Mon 06 Oct 2025: 31 npm records Tue 07 Oct 2025: 106 npm records Wed 08 Oct 2025: 80 npm records Thu 09 Oct 2025: 177 npm records Fri 10 Oct 2025: 45 npm records Sat 11 Oct 2025: 1 npm record Sun 12 Oct 2025: 7 npm records Mon 13 Oct 2025: 27 npm records Tue 14 Oct 2025: 21 npm records Wed 15 Oct 2025: 15 npm records Thu 16 Oct 2025: 6 npm records Fri 17 Oct 2025: 54 npm records Sat 18 Oct 2025: 17 npm records Sun 19 Oct 2025: 3 npm records Mon 20 Oct 2025: 10 npm records Tue 21 Oct 2025: 33 npm records Wed 22 Oct 2025: 17 npm records Thu 23 Oct 2025: 122 npm records Fri 24 Oct 2025: 40 npm records Sat 25 Oct 2025: 3 npm records Sun 26 Oct 2025: 132 npm records Mon 27 Oct 2025: 21 npm records Tue 28 Oct 2025: 30 npm records Wed 29 Oct 2025: 145 npm records Thu 30 Oct 2025: 162 npm records Fri 31 Oct 2025: 51 npm records Sat 01 Nov 2025: 1 npm record Sun 02 Nov 2025: 19 npm records Mon 03 Nov 2025: 19 npm records Tue 04 Nov 2025: 5 npm records Wed 05 Nov 2025: 21 npm records Thu 06 Nov 2025: 2 npm records Fri 07 Nov 2025: 14 npm records Sat 08 Nov 2025: 2 npm records Sun 09 Nov 2025: 334 npm records Mon 10 Nov 2025: 11,995 npm records Tue 11 Nov 2025: 76,854 npm records Wed 12 Nov 2025: 46,770 npm records Thu 13 Nov 2025: 5,144 npm records Fri 14 Nov 2025: 5 npm records Sat 15 Nov 2025: 1 npm record Sun 16 Nov 2025: 1 npm record Mon 17 Nov 2025: 50 npm records Tue 18 Nov 2025: 19 npm records Wed 19 Nov 2025: 11 npm records Thu 20 Nov 2025: 18 npm records Fri 21 Nov 2025: 2 npm records Sat 22 Nov 2025: 21 npm records Sun 23 Nov 2025: 1 npm record Mon 24 Nov 2025: 626 npm records Tue 25 Nov 2025: 206 npm records Wed 26 Nov 2025: 7 npm records Thu 27 Nov 2025: 4 npm records Fri 28 Nov 2025: 1 npm record Sat 29 Nov 2025: 7 npm records Sun 30 Nov 2025: 3 npm records Mon 01 Dec 2025: 84 npm records Tue 02 Dec 2025: 24 npm records Wed 03 Dec 2025: 346 npm records Thu 04 Dec 2025: 14 npm records Fri 05 Dec 2025: 39 npm records Sat 06 Dec 2025: 11 npm records Sun 07 Dec 2025: 3 npm records Mon 08 Dec 2025: 5 npm records Tue 09 Dec 2025: 12 npm records Wed 10 Dec 2025: 31 npm records Thu 11 Dec 2025: 103 npm records Fri 12 Dec 2025: 24 npm records Sat 13 Dec 2025: 0 npm records Sun 14 Dec 2025: 1 npm record Mon 15 Dec 2025: 9 npm records Tue 16 Dec 2025: 22 npm records Wed 17 Dec 2025: 3 npm records Thu 18 Dec 2025: 1 npm record Fri 19 Dec 2025: 67 npm records Sat 20 Dec 2025: 3 npm records Sun 21 Dec 2025: 2 npm records Mon 22 Dec 2025: 12 npm records Tue 23 Dec 2025: 189 npm records Wed 24 Dec 2025: 3 npm records Thu 25 Dec 2025: 7 npm records Fri 26 Dec 2025: 3 npm records Sat 27 Dec 2025: 5 npm records Sun 28 Dec 2025: 2 npm records Mon 29 Dec 2025: 3 npm records Tue 30 Dec 2025: 26 npm records Wed 31 Dec 2025: 13 npm records Thu 01 Jan 2026: 3 npm records Fri 02 Jan 2026: 18 npm records Sat 03 Jan 2026: 2 npm records Sun 04 Jan 2026: 2 npm records Mon 05 Jan 2026: 11 npm records Tue 06 Jan 2026: 38 npm records Wed 07 Jan 2026: 47 npm records Thu 08 Jan 2026: 19 npm records Fri 09 Jan 2026: 16 npm records Sat 10 Jan 2026: 9 npm records Sun 11 Jan 2026: 2 npm records Mon 12 Jan 2026: 33 npm records Tue 13 Jan 2026: 11 npm records Wed 14 Jan 2026: 2 npm records Thu 15 Jan 2026: 1 npm record Fri 16 Jan 2026: 63 npm records Sat 17 Jan 2026: 3 npm records Sun 18 Jan 2026: 0 npm records Mon 19 Jan 2026: 22 npm records Tue 20 Jan 2026: 22 npm records Wed 21 Jan 2026: 63 npm records Thu 22 Jan 2026: 17 npm records Fri 23 Jan 2026: 27 npm records Sat 24 Jan 2026: 0 npm records Sun 25 Jan 2026: 6 npm records Mon 26 Jan 2026: 4 npm records Tue 27 Jan 2026: 30 npm records Wed 28 Jan 2026: 42 npm records Thu 29 Jan 2026: 6 npm records Fri 30 Jan 2026: 5 npm records Sat 31 Jan 2026: 3 npm records Sun 01 Feb 2026: 0 npm records Mon 02 Feb 2026: 18 npm records Tue 03 Feb 2026: 45 npm records Wed 04 Feb 2026: 35 npm records Thu 05 Feb 2026: 21 npm records Fri 06 Feb 2026: 31 npm records Sat 07 Feb 2026: 0 npm records Sun 08 Feb 2026: 0 npm records Mon 09 Feb 2026: 5 npm records Tue 10 Feb 2026: 14 npm records Wed 11 Feb 2026: 9 npm records Thu 12 Feb 2026: 4 npm records Fri 13 Feb 2026: 17 npm records Sat 14 Feb 2026: 0 npm records Sun 15 Feb 2026: 3 npm records Mon 16 Feb 2026: 5 npm records Tue 17 Feb 2026: 2 npm records Wed 18 Feb 2026: 2 npm records Thu 19 Feb 2026: 2 npm records Fri 20 Feb 2026: 25 npm records Sat 21 Feb 2026: 1 npm record Sun 22 Feb 2026: 13 npm records Mon 23 Feb 2026: 5 npm records Tue 24 Feb 2026: 22 npm records Wed 25 Feb 2026: 17 npm records Thu 26 Feb 2026: 12 npm records Fri 27 Feb 2026: 20 npm records Sat 28 Feb 2026: 2 npm records Sun 01 Mar 2026: 5 npm records Mon 02 Mar 2026: 35 npm records Tue 03 Mar 2026: 78 npm records Wed 04 Mar 2026: 6 npm records Thu 05 Mar 2026: 15 npm records Fri 06 Mar 2026: 13 npm records Sat 07 Mar 2026: 0 npm records Sun 08 Mar 2026: 0 npm records Mon 09 Mar 2026: 4 npm records Tue 10 Mar 2026: 26 npm records Wed 11 Mar 2026: 20 npm records Thu 12 Mar 2026: 24 npm records Fri 13 Mar 2026: 38 npm records Sat 14 Mar 2026: 3 npm records Sun 15 Mar 2026: 8 npm records Mon 16 Mar 2026: 115 npm records Tue 17 Mar 2026: 7 npm records Wed 18 Mar 2026: 299 npm records Thu 19 Mar 2026: 15 npm records Fri 20 Mar 2026: 57 npm records Sat 21 Mar 2026: 10 npm records Sun 22 Mar 2026: 59 npm records Mon 23 Mar 2026: 23 npm records Tue 24 Mar 2026: 98 npm records Wed 25 Mar 2026: 29 npm records Thu 26 Mar 2026: 33 npm records Fri 27 Mar 2026: 11 npm records Sat 28 Mar 2026: 3 npm records Sun 29 Mar 2026: 7 npm records Mon 30 Mar 2026: 2 npm records Tue 31 Mar 2026: 4 npm records Wed 01 Apr 2026: 10 npm records Thu 02 Apr 2026: 23 npm records Fri 03 Apr 2026: 39 npm records Sat 04 Apr 2026: 0 npm records Sun 05 Apr 2026: 5 npm records Mon 06 Apr 2026: 9 npm records Tue 07 Apr 2026: 7 npm records Wed 08 Apr 2026: 5 npm records Thu 09 Apr 2026: 6 npm records Fri 10 Apr 2026: 3 npm records Sat 11 Apr 2026: 17 npm records Sun 12 Apr 2026: 19 npm records Mon 13 Apr 2026: 44 npm records Tue 14 Apr 2026: 40 npm records Wed 15 Apr 2026: 48 npm records Thu 16 Apr 2026: 113 npm records Fri 17 Apr 2026: 12 npm records Sat 18 Apr 2026: 12 npm records Sun 19 Apr 2026: 7 npm records Mon 20 Apr 2026: 20 npm records Tue 21 Apr 2026: 4 npm records Wed 22 Apr 2026: 31 npm records Thu 23 Apr 2026: 19 npm records Fri 24 Apr 2026: 10 npm records Sat 25 Apr 2026: 25 npm records Sun 26 Apr 2026: 11 npm records Mon 27 Apr 2026: 19 npm records Tue 28 Apr 2026: 2 npm records Wed 29 Apr 2026: 52 npm records Thu 30 Apr 2026: 7 npm records Fri 01 May 2026: 10 npm records Sat 02 May 2026: 5 npm records Sun 03 May 2026: 20 npm records Mon 04 May 2026: 43 npm records Tue 05 May 2026: 10 npm records Wed 06 May 2026: 8 npm records Thu 07 May 2026: 9 npm records Fri 08 May 2026: 11 npm records Sat 09 May 2026: 4 npm records Sun 10 May 2026: 8 npm records Mon 11 May 2026: 32 npm records Tue 12 May 2026: 173 npm records Wed 13 May 2026: 29 npm records Thu 14 May 2026: 48 npm records Fri 15 May 2026: 25 npm records Sat 16 May 2026: 11 npm records Sun 17 May 2026: 7 npm records Mon 18 May 2026: 11 npm records Tue 19 May 2026: 353 npm records Wed 20 May 2026: 95 npm records Thu 21 May 2026: 68 npm records Fri 22 May 2026: 49 npm records Sat 23 May 2026: 29 npm records Sun 24 May 2026: 18 npm records Mon 25 May 2026: 98 npm records Tue 26 May 2026: 63 npm records Wed 27 May 2026: 5 npm records Thu 28 May 2026: 188 npm records Fri 29 May 2026: 56 npm records Sat 30 May 2026: 3 npm records Sun 31 May 2026: 2 npm records Mon 01 Jun 2026: 53 npm records Tue 02 Jun 2026: 8 npm records Wed 03 Jun 2026: 5 npm records Thu 04 Jun 2026: 10 npm records Fri 05 Jun 2026: 76 npm records Sat 06 Jun 2026: 4 npm records Sun 07 Jun 2026: 4 npm records Mon 08 Jun 2026: 9 npm records Tue 09 Jun 2026: 139 npm records Wed 10 Jun 2026: 42 npm records Thu 11 Jun 2026: 124 npm records Fri 12 Jun 2026: 36 npm records Sat 13 Jun 2026: 30 npm records Sun 14 Jun 2026: 10 npm records Mon 15 Jun 2026: 55 npm records Tue 16 Jun 2026: 82 npm records Wed 17 Jun 2026: 188 npm records Thu 18 Jun 2026: 53 npm records Fri 19 Jun 2026: 45 npm records Sat 20 Jun 2026: 12 npm records Sun 21 Jun 2026: 7 npm records Mon 22 Jun 2026: 25 npm records Tue 23 Jun 2026: 70 npm records Wed 24 Jun 2026: 64 npm records Thu 25 Jun 2026: 60 npm records Fri 26 Jun 2026: 50 npm records Sat 27 Jun 2026: 5 npm records Sun 28 Jun 2026: 8 npm records Mon 29 Jun 2026: 110 npm records Tue 30 Jun 2026: 30 npm records Wed 01 Jul 2026: 22 npm records Thu 02 Jul 2026: 34 npm records Fri 03 Jul 2026: 11 npm records Sat 04 Jul 2026: 4 npm records Sun 05 Jul 2026: 5 npm records Mon 06 Jul 2026: 130 npm records Tue 07 Jul 2026: 461 npm records Wed 08 Jul 2026: 51 npm records Thu 09 Jul 2026: 116 npm records Fri 10 Jul 2026: 72 npm records Sat 11 Jul 2026: 7 npm records Sun 12 Jul 2026: 16 npm records Mon 13 Jul 2026: 284 npm records Tue 14 Jul 2026: 100 npm records Wed 15 Jul 2026: 52 npm records Thu 16 Jul 2026: 61 npm records Fri 17 Jul 2026: 7 npm records Sat 18 Jul 2026: 1 npm record Sun 19 Jul 2026: 2 npm records Mon 20 Jul 2026: 158 npm records Tue 21 Jul 2026: 22 npm records Wed 22 Jul 2026: 27 npm records Thu 23 Jul 2026: 18 npm records Fri 24 Jul 2026: 6 npm records Sat 25 Jul 2026: 15 npm records Sun 26 Jul 2026: 0 npm records Mon 27 Jul 2026: 30 npm records Tue 28 Jul 2026: 55 npm records Wed 29 Jul 2026: 25 npm records Thu 30 Jul 2026: 199 npm records Fri 31 Jul 2026: 65 npm records Sat 01 Aug 2026: 10 npm records Sun 02 Aug 2026: 6 npm records Mon 03 Aug 2026: 14 npm records Tue 04 Aug 2026: 503 npm records Wed 05 Aug 2026: 1,352 npm records Thu 06 Aug 2026: 94 npm records Fri 07 Aug 2026: 137 npm records Sat 08 Aug 2026: 46 npm records Sun 09 Aug 2026: 0 npm records Mon 10 Aug 2026: 42 npm records Tue 11 Aug 2026: 43 npm records Wed 12 Aug 2026: 152 npm records Thu 13 Aug 2026: 85 npm records Fri 14 Aug 2026: 60 npm records Sat 15 Aug 2026: 19 npm records Sun 16 Aug 2026: 0 npm records Mon 17 Aug 2026: 17 npm records Tue 18 Aug 2026: 64 npm records Wed 19 Aug 2026: 126 npm records Thu 20 Aug 2026: 17 npm records Fri 21 Aug 2026: 13 npm records Sat 22 Aug 2026: 4 npm records Sun 23 Aug 2026: 32 npm records Mon 24 Aug 2026: 64 npm records Tue 25 Aug 2026: 73 npm records Wed 26 Aug 2026: 43 npm records Thu 27 Aug 2026: 25 npm records Fri 28 Aug 2026: 958 npm records Sat 29 Aug 2026: 27 npm records Sun 30 Aug 2026: 22 npm records Mon 31 Aug 2026: 30 npm records Tue 01 Sep 2026: 33 npm records Wed 02 Sep 2026: 16 npm records Thu 03 Sep 2026: 48 npm records Fri 04 Sep 2026: 39 npm records Sat 05 Sep 2026: 45 npm records Sun 06 Sep 2026: 19 npm records Mon 07 Sep 2026: 28 npm records Tue 08 Sep 2026: 14 npm records Wed 09 Sep 2026: 52 npm records Thu 10 Sep 2026: 12 npm records Fri 11 Sep 2026: 6 npm records Sat 12 Sep 2026: 7 npm records Sun 13 Sep 2026: 0 npm records Mon 14 Sep 2026: 25 npm records Tue 15 Sep 2026: 27 npm records Wed 16 Sep 2026: 38 npm records Thu 17 Sep 2026: 20 npm records Fri 18 Sep 2026: 21 npm records Sat 19 Sep 2026: 1 npm record Sun 20 Sep 2026: 3 npm records Mon 21 Sep 2026: 68 npm records Tue 22 Sep 2026: 93 npm records Wed 23 Sep 2026: 61 npm records Thu 24 Sep 2026: 16 npm records Fri 25 Sep 2026: 17 npm records Sat 26 Sep 2026: 2 npm records Sun 27 Sep 2026: 0 npm records Mon 28 Sep 2026: 39 npm records Tue 29 Sep 2026: 63 npm records Wed 30 Sep 2026: 42 npm records Thu 01 Oct 2026: 5 npm records Fri 02 Oct 2026: 7 npm records Sat 03 Oct 2026: 9 npm records Sun 04 Oct 2026: 54 npm records Mon 05 Oct 2026: 56 npm records Tue 06 Oct 2026: 10 npm records Wed 07 Oct 2026: 15 npm records Thu 08 Oct 2026: 71 npm records Fri 09 Oct 2026: 43 npm records Sat 10 Oct 2026: 1 npm record Sun 11 Oct 2026: 24 npm records Mon 12 Oct 2026: 57 npm records Tue 13 Oct 2026: 2 npm records
Records per day by OSV “published” date, npm only. Totals under each year. Outlined squares are after our retrieval date. Source: OpenSSF malicious-packages repository, our count.
The calendar is mostly light and mid blue: on a typical day in 2026 the database adds a few dozen npm records. Only 9 days crossed 1,000 records, and each one has an explanation in the records themselves. The largest was 11 November 2025, with 76,854. The four red days from 10 to 13 November 2025 are the tea.xyz token-farming campaign that Amazon Inspector reported. 14 August (34,202) and 5 September 2025 (4,726) are bulk uploads published at a single second. 20 June 2022 (4,691) is GitHub’s malware advisory feed. On 25 June 2024 (2,283), ReversingLabs filed records whose names advertise free movies, game currency, and gift-card generators. 5 August 2026 (1,352), the day after the keyv worm, is mostly Amazon Inspector records describing install-time droppers.
What the 222,159 records actually are
Token farming (tea.xyz): 140,728 records (63.3%) Bulk uploads with no detail: 38,805 records (17.5%) Individually described reports: 42,626 records (19.2%) 63.3% Token farming (tea.xyz) 140,728 records 17.5% Bulk uploads with no detail 38,805 records 19.2% Individually described reports 42,626 records
Token farming: record text names the tea.xyz campaign or tea protocol. Bulk uploads: non-token-farming records sharing one publish timestamp with 500 or more others. Everything else is counted as individually described.
Headline counts of malicious npm packages are dominated by spam. 140,728 records (63.3%) describe packages built to farm tea.xyz rewards: no functional code, auto-publishing scripts, and randomized names. Amazon Inspector, which filed them, says it identified over 150,000 such packages in an investigation that ran from 8 to 12 November 2025 and submitted them to the OpenSSF repository. Another 38,805 records (17.5%) arrived in two bulk uploads, on 14 August and 5 September 2025, whose records say only that the package “was found to contain malicious code.”
That leaves 42,626 individually described records over five years. This is the series to watch for real attack activity, and it is the one we chart next.
Malicious npm packages per month
2022 to 2025 2026 October 2026, 13 days only
0 1,000 2,000 3,000 4,000 5,000 Jan 2022: 1 individually described records Feb 2022: 0 individually described records Mar 2022: 0 individually described records Apr 2022: 0 individually described records May 2022: 196 individually described records Jun 2022: 4,943 individually described records Jul 2022: 814 individually described records Aug 2022: 1,079 individually described records Sep 2022: 176 individually described records Oct 2022: 99 individually described records Nov 2022: 52 individually described records Dec 2022: 64 individually described records Jan 2023: 219 individually described records Feb 2023: 133 individually described records Mar 2023: 111 individually described records Apr 2023: 135 individually described records May 2023: 319 individually described records Jun 2023: 182 individually described records Jul 2023: 245 individually described records Aug 2023: 271 individually described records Sep 2023: 233 individually described records Oct 2023: 118 individually described records Nov 2023: 203 individually described records Dec 2023: 122 individually described records Jan 2024: 954 individually described records Feb 2024: 92 individually described records Mar 2024: 117 individually described records Apr 2024: 134 individually described records May 2024: 79 individually described records Jun 2024: 2,563 individually described records Jul 2024: 785 individually described records Aug 2024: 214 individually described records Sep 2024: 953 individually described records Oct 2024: 932 individually described records Nov 2024: 716 individually described records Dec 2024: 778 individually described records Jan 2025: 743 individually described records Feb 2025: 775 individually described records Mar 2025: 1,195 individually described records Apr 2025: 478 individually described records May 2025: 962 individually described records Jun 2025: 802 individually described records Jul 2025: 1,030 individually described records Aug 2025: 933 individually described records Sep 2025: 940 individually described records Oct 2025: 1,414 individually described records Nov 2025: 1,435 individually described records Dec 2025: 1,067 individually described records Jan 2026: 527 individually described records Feb 2026: 330 individually described records Mar 2026: 1,047 individually described records Apr 2026: 619 individually described records May 2026: 1,491 individually described records Jun 2026: 1,414 individually described records Jul 2026: 2,056 individually described records Aug 2026: 4,078 individually described records Sep 2026: 855 individually described records Oct 2026: 354 individually described records (1 to 13 Oct only) 2022 2023 2024 2025 2026
Individually described npm records per month (token farming and the two bulk uploads removed), by OSV published date.
The busiest month in this series was June 2022, with 4,943 records, 4,691 of them from GitHub’s malware advisory feed on a single day, 20 June. In 2026 the peak was August, with 4,078, the month of the keyv worm. From January to September 2026 the database published 12,417 individually described npm records, against 7,858 in the same months of 2025, a change of +58%. Counting every record, the comparison runs the other way (12,417 against 46,663) because the 2025 figure includes both bulk uploads. That gap is why raw totals are a poor measure of attack activity.
We then tested whether the 2026 rise in individually described records reflects more attacks or more reporting. It is mostly one reporter. Records crediting Amazon Inspector went from 2,699 to 9,626 in those nine months, while records crediting anyone else fell from 5,159 to 2,791. The data shows more reporting by one contributor; it cannot show whether more malicious npm packages are being published.
Publish dates measure when a report reached the database, not when the package went live on npm. A surge in a month can mean more attacks or more reporting, and the data cannot separate the two.
npm against PyPI and other ecosystems
npm (all records) npm (all records): 222,159 records 222,159 npm minus token farming npm minus token farming: 81,431 records 81,431 PyPI PyPI: 11,798 records 11,798 RubyGems RubyGems: 4,304 records 4,304 NuGet NuGet: 782 records 782 crates.io crates.io: 21 records 21 Go Go: 20 records 20 Open VSX Open VSX: 17 records 17 VS Code VS Code: 4 records 4 Maven Maven: 2 records 2 Git Git: 1 records 1 Packagist Packagist: 1 records 1
All malicious records in the OpenSSF database by ecosystem directory, snapshot of 13 October 2026.
npm accounts for 92.9% of the 239,109 malicious package records in the database. PyPI is a distant second with 11,798, then RubyGems with 4,304 and NuGet with 782. Removing the token-farming flood does not change the order: npm still has 81,431 records, 6.9 times PyPI. The year rows show one other jump worth watching: RubyGems went from 129 records in 2025 to 3,368 so far in 2026.
Year
npm
PyPI
RubyGems
NuGet
Other
npm: token farming
npm: bulk uploads
npm: individually described
2022
7,424
20
0
0
1
0
0
7,424
2023
2,291
6,467
16
0
1
0
0
2,291
2024
8,317
2,645
791
738
0
0
0
8,317
2025
191,307
1,245
129
22
27
140,728
38,805
11,774
2026*
12,771
1,421
3,368
22
35
0
0
12,771
*2026 is 1 January to 13 October. 46 records with no published date and 5 from 2021 are excluded from the year rows.
The largest incident waves
We matched waves to records using text in the records themselves (for example, every record that names Sha1-Hulud) or a date window, then checked each against the primary source. Counts are OpenSSF records, which can be lower than the number of packages a vendor or registry reports.
Date
Wave and how we matched it
Records
What the primary source says
Primary source
10 to 13 Nov 2025
tea.xyz token-farming flood Record text names the tea.xyz token reward campaign
140,728
Amazon Inspector says it identified over 150,000 packages tied to the campaign, investigated 8 to 12 November, and submitted them to OpenSSF.
AWS Security Blog
14 Aug 2025
Single bulk upload, no campaign detail One publish timestamp, all credited to Amazon Inspector
34,166
Each record carries only the line “was found to contain malicious code”; no public write-up is linked.
OpenSSF malicious-packages
20 Jun 2022
GitHub malware advisory feed, single day All records published that day (source feed: ghsa-malware)
4,691
Largest single day before 2025; records carry GitHub’s standard malware advisory text.
GitHub Advisory Database
5 Sep 2025
Second bulk upload, no campaign detail One publish timestamp, all credited to Amazon Inspector
4,639
Same generic record text as the August upload.
OpenSSF malicious-packages
24 to 26 Nov 2025
Sha1-Hulud: The Second Coming Record text names Sha1-Hulud
792
GitHub malware advisories published 24 November 2025 for packages including @zapier/zapier-sdk.
GHSA-hxq5-5w35-rmpp
4 Aug 2026
keyv and cacheable worm (“Here We Go Again”) Record text names the wave
444
The keyv record says the poisoned versions shipped with a valid, signed provenance attestation and the worm poisoned 400+ packages.
GHSA-3p9h-f68w-m6fx OSV MAL-2026-11524
19 May 2026
@antv packages via the atool account Record text names the atool account
317
The OpenSSF records say 631 malicious versions across 314 packages were published in a 22-minute burst.
GHSA-hqrw-phww-294v
15 to 18 Sep 2025
Shai-Hulud worm Record text names Shai-Hulud
203
GitHub says it was notified on 14 September and removed 500+ compromised packages; CISA’s alert of 23 September says over 500 packages.
CISA alert GitHub blog
11 May 2026
TanStack (Mini Shai-Hulud) @tanstack/ records, May 2026
42
TanStack’s postmortem: 84 malicious versions across 42 @tanstack packages, published 19:20 to 19:26 UTC via a stolen GitHub Actions OIDC token.
TanStack postmortem
8 Sep 2025
chalk and debug maintainer phishing All npm records published that day
20
The debug advisory says the publishing account was taken over after a phishing attack on 8 September and the malware redirected cryptocurrency transactions.
debug advisory GHSA-4×49-vf9v-38px chalk issue #656
31 Mar 2026
axios hijack (plain-crypto-js) Records for axios and plain-crypto-js
2
CISA: axios 1.14.1 and 0.30.4 pulled in plain-crypto-js 4.2.1, which downloads a remote access trojan.
CISA alert GHSA-fw8c-xr5c-95f9
The five worm waves (Shai-Hulud, Sha1-Hulud, TanStack, @antv, and keyv) add up to 1,798 records, less than 1% of the database. Their reach is the opposite of their count: the keyv wave alone hit keyv, flat-cache, and file-entry-cache, which together had 2.2 billion downloads last month. For Shai-Hulud, the database has 203 records naming the worm, while GitHub says it removed more than 500 compromised packages: the OpenSSF count is a floor, not a census.
Hijacked packages in the npm top 1,000
We checked every malicious record against the 1,000 most-downloaded npm packages (ecosyste.ms ranking by last-month downloads). 19 records name one exactly. These are not lookalikes: each record lists specific malicious versions of a legitimate, heavily used package. Together the 19 packages had 25.4 billion downloads in the last month.
Package
Download rank
Downloads, last month
Record published
Malicious versions
Record
eslint-config-prettier
809
284M
2025-07-21
8.10.1, 9.1.1, 10.1.6, 10.1.7
MAL-2025-6022
napi-postinstall
949
250M
2025-07-21
0.3.1
MAL-2025-6025
debug
3
3,112M
2025-09-08
4.4.2
MAL-2025-46974
ansi-styles
4
3,092M
2025-09-08
6.2.2
MAL-2025-46967
strip-ansi
9
2,340M
2025-09-08
7.1.1
MAL-2025-46980
ansi-regex
10
2,308M
2025-09-08
6.2.1
MAL-2025-46966
supports-color
12
2,265M
2025-09-08
10.2.1
MAL-2025-46981
chalk
14
2,135M
2025-09-08
5.6.1
MAL-2025-46969
wrap-ansi
15
2,019M
2025-09-08
9.0.1
MAL-2025-46983
color-name
26
1,613M
2025-09-08
2.0.1
MAL-2025-46972
color-convert
28
1,557M
2025-09-08
3.1.1
MAL-2025-46971
is-arrayish
361
524M
2025-09-08
0.3.3
MAL-2025-46977
slice-ansi
374
513M
2025-09-08
7.1.1
MAL-2025-46979
error-ex
442
453M
2025-09-08
1.3.3
MAL-2025-46975
axios
370
518M
2026-03-31
0.30.4, 1.14.1
MAL-2026-2307
react-hook-form
907
258M
2026-04-18
7.73.0
MAL-2026-2853
keyv
186
747M
2026-08-04
6.0.0
MAL-2026-11524
flat-cache
192
733M
2026-08-04
6.1.24
MAL-2026-11971
file-entry-cache
213
702M
2026-08-04
11.1.6
MAL-2026-11970
Download rank and monthly downloads from ecosyste.ms, retrieved 13 October 2026. Each record lists only the malicious versions; other versions of these packages are not affected.
12 of the 19 come from a single day, 8 September 2025, when one maintainer’s account was phished. The keyv case shows why build provenance alone does not settle trust: the record states that the poisoned versions carried a valid, signed provenance attestation, because attackers pushed code to the source repository and let the normal release workflow publish it.
Typosquats are a small share
To test the typosquatting story, we compared each package name to the top 1,000 npm names. A name counts as a lookalike if it is one edit away from a popular name of four or more characters, or two edits away from one of seven or more characters. Exact matches (the hijacks above) are excluded.
Only 332 of 81,430 non-token-farming names pass (0.4%): 96 at one edit and 236 at two. None of the 140,728 token-farming names do (0 matches). The most imitated targets are express (19 lookalikes), commander (13), and lodash (10).
Two other naming signals are larger. 19.3% of non-token-farming records are scoped names like @org/package (7.7% of all records). And of the 24,096 non-token-farming records that list explicit versions, 3,838 (15.9%) include a major version of 90 or higher, a pattern used to win version resolution in dependency confusion.
Imitated package
Rank
Lookalikes
Examples
express
263
19
boxpress, dxpress, ekspress, epress, epxress
commander
7
13
cmmande, cmomander, comamnder, comander, commandef
lodash
183
10
fodash, iodash, ldash, lodah, lodashh
bluebird
871
8
blbird, blubird, bluebidr, bluebin, blueibrd
chalk
14
8
calk, chalc, chalk2, chalkk, chalq
react
146
8
eact, r2act, reaact, reacct, reat
async
414
7
aasync, asinc, asnc, asymc, asynd
typescript
51
7
m-typescript, o-typescript, typecript, typescri, typescript3
fdir
119
6
fdig, fdir1, fdir2, fdir3, fdir4
react-dom
172
5
eract-dom, react-dmo, react-odm, reat-com, rect-do
fs-extra
84
5
fs-etxra, fs-exrta, fs-extar, fs-xetra, fsextrra
jsonwebtoken
869
5
jsnwebtokn, jsonwebjstoken, jsonwedjoken, jsonwepjoken, jsonweqjoken
Who reports malicious npm packages
Amazon Inspector is credited on 88% of all npm records. With token farming removed, the field is wider:
Credited finder
Records excl. token farming
Share
All npm records
Amazon Inspector
54,996
67.5%
195,724
ReversingLabs
10,023
12.3%
10,024
OpenSSF: Package Analysis
5,287
6.5%
5,288
SafeDep
1,454
1.8%
1,454
Aikido Security
444
0.5%
444
Socket Threat Research Team
444
0.5%
444
GitHax: Software Supply Chain Threat Intelligence
194
0.2%
194
Checkmarx
142
0.2%
142
OX Security
103
0.1%
103
Stacklok: trustypkg.dev
65
0.1%
65
A record can credit more than one finder, so shares can sum past 100%. 15,483 non-token-farming records credit no finder; 15,438 of them list GitHub’s malware advisory feed (ghsa-malware) as a source.
This concentration matters for anyone reading trend lines. A new detection rule from one large contributor can move a month’s total by tens of thousands, as August and November 2025 show. The same caution applies when reading the record pace of CVE publication in 2026 : a count of reports is not a count of attacks.
What this means for MSPs
Do not let installs run code by default. CISA’s April 2026 axios alert recommends ignore-scripts=true in .npmrc. GitHub says Shai-Hulud spread through malicious post-install scripts, and the OpenSSF records say the @antv and keyv waves ran through preinstall hooks.
Add a release-age delay. The same alert recommends min-release-age=7 so npm only installs versions at least seven days old. TanStack says its malicious versions were spotted 20 to 26 minutes after publication, and the debug advisory says the bad release was removed the same day, so a short delay would have skipped both.
Commit lockfiles and install with npm ci. OpenSSF’s npm guide recommends lockfiles because they pin dependencies by cryptographic hash, and npm ci treats them as read-only. CISA’s Shai-Hulud alert asked teams to check lockfiles for affected versions and pin to releases from before 16 September 2025.
Treat provenance as necessary, not sufficient. Provenance proves which pipeline built a package, not that the source was clean. The keyv versions shipped with valid provenance.
Claim your scopes and allowlist registries. OpenSSF recommends registering your organization’s scope on the public registry and binding it to your private registry, which blocks dependency confusion.
Monitor the feed, not the headlines. The OpenSSF records are free in OSV format; matching client lockfiles against them catches the hijacks that matter. When a wave hits, rotate developer and CI credentials, as CISA advised for both Shai-Hulud and axios. Only 7 of the 222,159 npm records carry a CVE alias, and the CISA Known Exploited Vulnerabilities catalog lists only CVEs, so do not wait for KEV to flag a package compromise.
Frequently asked questions
How many malicious npm packages are there?
The OpenSSF malicious-packages database held 222,159 npm records on 13 October 2026, covering 222,158 unique package names. That is 92.9% of all 239,109 malicious package records across every ecosystem in the database. OSV.dev’s npm export of the same day lists 222,158 active MAL records; the one-record gap is a record published after the export.
Are npm packages safe?
Most reported malicious packages are spam: 63% are tea.xyz token farming. But 19 records name packages in the 1,000 most-downloaded on npm, including chalk, debug, axios, and keyv. Those hijacks, not obscure lookalikes, are where real exposure comes from.
Is there a recent issue with npm?
The latest large wave was the keyv and cacheable worm of 4 August 2026, with 444 OpenSSF records. The database added 855 npm records in September 2026 and 354 from 1 to 13 October.
Are most malicious npm packages typosquats?
No. Only 332 of 81,430 non-token-farming package names (0.4%) sit within one or two character edits of a top-1,000 npm package under our test. None of the 140,728 token-farming names did.
How does npm compare with PyPI for malicious packages?
npm has 222,159 records against 11,798 for PyPI. Even after removing token farming, npm has 81,431, or 6.9 times PyPI.
How do you protect against npm supply chain attacks?
CISA’s 2026 axios alert recommends setting ignore-scripts=true and min-release-age=7 in .npmrc, rotating developer credentials, and phishing-resistant MFA. OpenSSF’s npm guide adds committed lockfiles installed with npm ci and scoped names for private packages.
Methodology
Source. OpenSSF malicious-packages repository (github.com/ossf/malicious-packages), main branch tarball downloaded 13 October 2026. We parsed every OSV record under osv/malicious/ (239,109 records across 11 ecosystem directories; 356 withdrawn records under osv/withdrawn/ excluded). Ecosystem is the directory name. Dates are the OSV “published” field (UTC).
Cross-check. OSV.dev’s npm export (all.zip, same day) holds 222,489 MAL- records, of which 331 are withdrawn, leaving 222,158. Our OpenSSF count is 222,159; the one-record difference is a record published after the OSV export.
Definitions. Token farming: summary or details text contains “tea.xyz” or “tea protocol”. Bulk upload: a non-token-farming npm record whose published timestamp is shared by 500 or more others (two timestamps qualify: 2025-08-14T18:52:04Z (34,166), 2025-09-05T17:10:25Z (4,639)). Individually described: all other npm records. Finder: names in each record’s “credits” field. Lookalike: Levenshtein distance 1 to a top-1,000 name of 4+ characters, or 2 to a name of 7+ characters, exact matches excluded, full package names compared. Top 1,000: ecosyste.ms npm registry packages sorted by last-month downloads, retrieved 13 October 2026. Hijacked top package: record name exactly equals a top-1,000 name.
Limitations. The database counts reports, not attacks, and reporting effort varies by contributor and over time. Published dates show when a record entered the database, not when the package appeared on npm. One record covers one package; a wave’s record count can differ from the package or version counts vendors publish. Text matching depends on what contributors wrote: some records carry only generic text. The lookalike test catches character-level typos, not combination names like “express-helper”.
Not advice. This is an analysis of public data, not a security assessment of any package or environment.
Cite as: The Uptime Report. "Malicious npm Packages: 63% of 222,159 Reports Were One Token-Farming Flood, While Worms Hit the Top 1,000." October 2026. https://theuptimereport.com/malicious-npm-packages-statistics/
References
OpenSSF, malicious-packages repository (OSV records) . Accessed October 2026.
OSV.dev, npm vulnerability export (all.zip) . Accessed October 2026.
ecosyste.ms, npm registry packages sorted by downloads . Accessed October 2026.
AWS Security Blog, “Amazon Inspector detects over 150,000 malicious packages linked to token farming campaign,” 13 November 2025 . Accessed October 2026.
CISA, “Widespread Supply Chain Compromise Impacting npm Ecosystem,” 23 September 2025 . Accessed October 2026.
GitHub Blog, “Our plan for a more secure npm supply chain,” 22 September 2025 . Accessed October 2026.
debug-js/debug, security advisory GHSA-4×49-vf9v-38px . Accessed October 2026.
chalk/chalk, issue #656, “Version 5.6.1 published to npm is compromised” . Accessed October 2026.
GitHub Advisory Database, GHSA-hxq5-5w35-rmpp (Malware in @zapier/zapier-sdk) . Accessed October 2026.
CISA, “Supply Chain Compromise Impacts Axios Node Package Manager,” 20 April 2026 . Accessed October 2026.
GitHub Advisory Database, GHSA-fw8c-xr5c-95f9 (axios) . Accessed October 2026.
TanStack, npm supply chain compromise postmortem, 11 May 2026 . Accessed October 2026.
GitHub Advisory Database, GHSA-hqrw-phww-294v (@antv/g2) . Accessed October 2026.
GitHub Advisory Database, GHSA-3p9h-f68w-m6fx (Malware in keyv) . Accessed October 2026.
OSV.dev, MAL-2026-11524 (keyv 6.0.0) . Accessed October 2026.
OpenSSF, npm Best Practices Guide . Accessed October 2026.
GitHub Advisory Database, malware advisories . Accessed October 2026.
Research library
More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research
Infrastructure and uptime
Regulation and disclosure
Leave a Reply