Uptime Report Research · Software Supply Chain

Malicious npm Packages: 63% of 222,159 Reports Were One Token-Farming Flood, While Worms Hit the Top 1,000

We counted every record of malicious npm packages in the OpenSSF database: 222,159 through 13 October 2026, 93% of all ecosystems. But 63% came from one tea.xyz token-farming flood in November 2025, and 17% from two bulk uploads with no detail. The dangerous part is small: 19 records hit top-1,000 packages like chalk, axios, and keyv.

222,159malicious npm records, 2021 to 13 Oct 2026
63.3%tea.xyz token farming, filed 9 to 13 Nov 2025
19records naming a top-1,000 npm package
0.4%of non-spam names are lookalikes of a top-1,000 package
6.9xnpm vs PyPI, even with token farming removed

Every malicious npm report, day by day

Each square is one day. The color is the number of npm records the OpenSSF database published that day, from the first records in 2021 to our snapshot on 13 October 2026. Hover a square for the exact count.

01 to 45 to 1920 to 4950 to 199200 to 9991,000+

JanFebMarAprMayJunJulAugSepOctNovDec20227,42420232,29120248,3172025191,307202612,771Sat 01 Jan 2022: 0 npm recordsSun 02 Jan 2022: 0 npm recordsMon 03 Jan 2022: 1 npm recordTue 04 Jan 2022: 0 npm recordsWed 05 Jan 2022: 0 npm recordsThu 06 Jan 2022: 0 npm recordsFri 07 Jan 2022: 0 npm recordsSat 08 Jan 2022: 0 npm recordsSun 09 Jan 2022: 0 npm recordsMon 10 Jan 2022: 0 npm recordsTue 11 Jan 2022: 0 npm recordsWed 12 Jan 2022: 0 npm recordsThu 13 Jan 2022: 0 npm recordsFri 14 Jan 2022: 0 npm recordsSat 15 Jan 2022: 0 npm recordsSun 16 Jan 2022: 0 npm recordsMon 17 Jan 2022: 0 npm recordsTue 18 Jan 2022: 0 npm recordsWed 19 Jan 2022: 0 npm recordsThu 20 Jan 2022: 0 npm recordsFri 21 Jan 2022: 0 npm recordsSat 22 Jan 2022: 0 npm recordsSun 23 Jan 2022: 0 npm recordsMon 24 Jan 2022: 0 npm recordsTue 25 Jan 2022: 0 npm recordsWed 26 Jan 2022: 0 npm recordsThu 27 Jan 2022: 0 npm recordsFri 28 Jan 2022: 0 npm recordsSat 29 Jan 2022: 0 npm recordsSun 30 Jan 2022: 0 npm recordsMon 31 Jan 2022: 0 npm recordsTue 01 Feb 2022: 0 npm recordsWed 02 Feb 2022: 0 npm recordsThu 03 Feb 2022: 0 npm recordsFri 04 Feb 2022: 0 npm recordsSat 05 Feb 2022: 0 npm recordsSun 06 Feb 2022: 0 npm recordsMon 07 Feb 2022: 0 npm recordsTue 08 Feb 2022: 0 npm recordsWed 09 Feb 2022: 0 npm recordsThu 10 Feb 2022: 0 npm recordsFri 11 Feb 2022: 0 npm recordsSat 12 Feb 2022: 0 npm recordsSun 13 Feb 2022: 0 npm recordsMon 14 Feb 2022: 0 npm recordsTue 15 Feb 2022: 0 npm recordsWed 16 Feb 2022: 0 npm recordsThu 17 Feb 2022: 0 npm recordsFri 18 Feb 2022: 0 npm recordsSat 19 Feb 2022: 0 npm recordsSun 20 Feb 2022: 0 npm recordsMon 21 Feb 2022: 0 npm recordsTue 22 Feb 2022: 0 npm recordsWed 23 Feb 2022: 0 npm recordsThu 24 Feb 2022: 0 npm recordsFri 25 Feb 2022: 0 npm recordsSat 26 Feb 2022: 0 npm recordsSun 27 Feb 2022: 0 npm recordsMon 28 Feb 2022: 0 npm recordsTue 01 Mar 2022: 0 npm recordsWed 02 Mar 2022: 0 npm recordsThu 03 Mar 2022: 0 npm recordsFri 04 Mar 2022: 0 npm recordsSat 05 Mar 2022: 0 npm recordsSun 06 Mar 2022: 0 npm recordsMon 07 Mar 2022: 0 npm recordsTue 08 Mar 2022: 0 npm recordsWed 09 Mar 2022: 0 npm recordsThu 10 Mar 2022: 0 npm recordsFri 11 Mar 2022: 0 npm recordsSat 12 Mar 2022: 0 npm recordsSun 13 Mar 2022: 0 npm recordsMon 14 Mar 2022: 0 npm recordsTue 15 Mar 2022: 0 npm recordsWed 16 Mar 2022: 0 npm recordsThu 17 Mar 2022: 0 npm recordsFri 18 Mar 2022: 0 npm recordsSat 19 Mar 2022: 0 npm recordsSun 20 Mar 2022: 0 npm recordsMon 21 Mar 2022: 0 npm recordsTue 22 Mar 2022: 0 npm recordsWed 23 Mar 2022: 0 npm recordsThu 24 Mar 2022: 0 npm recordsFri 25 Mar 2022: 0 npm recordsSat 26 Mar 2022: 0 npm recordsSun 27 Mar 2022: 0 npm recordsMon 28 Mar 2022: 0 npm recordsTue 29 Mar 2022: 0 npm recordsWed 30 Mar 2022: 0 npm recordsThu 31 Mar 2022: 0 npm recordsFri 01 Apr 2022: 0 npm recordsSat 02 Apr 2022: 0 npm recordsSun 03 Apr 2022: 0 npm recordsMon 04 Apr 2022: 0 npm recordsTue 05 Apr 2022: 0 npm recordsWed 06 Apr 2022: 0 npm recordsThu 07 Apr 2022: 0 npm recordsFri 08 Apr 2022: 0 npm recordsSat 09 Apr 2022: 0 npm recordsSun 10 Apr 2022: 0 npm recordsMon 11 Apr 2022: 0 npm recordsTue 12 Apr 2022: 0 npm recordsWed 13 Apr 2022: 0 npm recordsThu 14 Apr 2022: 0 npm recordsFri 15 Apr 2022: 0 npm recordsSat 16 Apr 2022: 0 npm recordsSun 17 Apr 2022: 0 npm recordsMon 18 Apr 2022: 0 npm recordsTue 19 Apr 2022: 0 npm recordsWed 20 Apr 2022: 0 npm recordsThu 21 Apr 2022: 0 npm recordsFri 22 Apr 2022: 0 npm recordsSat 23 Apr 2022: 0 npm recordsSun 24 Apr 2022: 0 npm recordsMon 25 Apr 2022: 0 npm recordsTue 26 Apr 2022: 0 npm recordsWed 27 Apr 2022: 0 npm recordsThu 28 Apr 2022: 0 npm recordsFri 29 Apr 2022: 0 npm recordsSat 30 Apr 2022: 0 npm recordsSun 01 May 2022: 0 npm recordsMon 02 May 2022: 0 npm recordsTue 03 May 2022: 0 npm recordsWed 04 May 2022: 0 npm recordsThu 05 May 2022: 0 npm recordsFri 06 May 2022: 0 npm recordsSat 07 May 2022: 0 npm recordsSun 08 May 2022: 0 npm recordsMon 09 May 2022: 1 npm recordTue 10 May 2022: 0 npm recordsWed 11 May 2022: 1 npm recordThu 12 May 2022: 0 npm recordsFri 13 May 2022: 1 npm recordSat 14 May 2022: 0 npm recordsSun 15 May 2022: 0 npm recordsMon 16 May 2022: 52 npm recordsTue 17 May 2022: 23 npm recordsWed 18 May 2022: 12 npm recordsThu 19 May 2022: 8 npm recordsFri 20 May 2022: 0 npm recordsSat 21 May 2022: 0 npm recordsSun 22 May 2022: 0 npm recordsMon 23 May 2022: 2 npm recordsTue 24 May 2022: 0 npm recordsWed 25 May 2022: 0 npm recordsThu 26 May 2022: 0 npm recordsFri 27 May 2022: 0 npm recordsSat 28 May 2022: 0 npm recordsSun 29 May 2022: 0 npm recordsMon 30 May 2022: 0 npm recordsTue 31 May 2022: 96 npm recordsWed 01 Jun 2022: 31 npm recordsThu 02 Jun 2022: 20 npm recordsFri 03 Jun 2022: 1 npm recordSat 04 Jun 2022: 0 npm recordsSun 05 Jun 2022: 0 npm recordsMon 06 Jun 2022: 0 npm recordsTue 07 Jun 2022: 0 npm recordsWed 08 Jun 2022: 61 npm recordsThu 09 Jun 2022: 19 npm recordsFri 10 Jun 2022: 5 npm recordsSat 11 Jun 2022: 0 npm recordsSun 12 Jun 2022: 0 npm recordsMon 13 Jun 2022: 46 npm recordsTue 14 Jun 2022: 12 npm recordsWed 15 Jun 2022: 2 npm recordsThu 16 Jun 2022: 0 npm recordsFri 17 Jun 2022: 0 npm recordsSat 18 Jun 2022: 0 npm recordsSun 19 Jun 2022: 0 npm recordsMon 20 Jun 2022: 4,691 npm recordsTue 21 Jun 2022: 6 npm recordsWed 22 Jun 2022: 20 npm recordsThu 23 Jun 2022: 0 npm recordsFri 24 Jun 2022: 0 npm recordsSat 25 Jun 2022: 0 npm recordsSun 26 Jun 2022: 0 npm recordsMon 27 Jun 2022: 4 npm recordsTue 28 Jun 2022: 0 npm recordsWed 29 Jun 2022: 1 npm recordThu 30 Jun 2022: 24 npm recordsFri 01 Jul 2022: 0 npm recordsSat 02 Jul 2022: 0 npm recordsSun 03 Jul 2022: 0 npm recordsMon 04 Jul 2022: 0 npm recordsTue 05 Jul 2022: 18 npm recordsWed 06 Jul 2022: 27 npm recordsThu 07 Jul 2022: 0 npm recordsFri 08 Jul 2022: 28 npm recordsSat 09 Jul 2022: 0 npm recordsSun 10 Jul 2022: 0 npm recordsMon 11 Jul 2022: 428 npm recordsTue 12 Jul 2022: 34 npm recordsWed 13 Jul 2022: 0 npm recordsThu 14 Jul 2022: 4 npm recordsFri 15 Jul 2022: 0 npm recordsSat 16 Jul 2022: 0 npm recordsSun 17 Jul 2022: 0 npm recordsMon 18 Jul 2022: 22 npm recordsTue 19 Jul 2022: 0 npm recordsWed 20 Jul 2022: 19 npm recordsThu 21 Jul 2022: 115 npm recordsFri 22 Jul 2022: 14 npm recordsSat 23 Jul 2022: 0 npm recordsSun 24 Jul 2022: 0 npm recordsMon 25 Jul 2022: 52 npm recordsTue 26 Jul 2022: 44 npm recordsWed 27 Jul 2022: 6 npm recordsThu 28 Jul 2022: 0 npm recordsFri 29 Jul 2022: 3 npm recordsSat 30 Jul 2022: 0 npm recordsSun 31 Jul 2022: 0 npm recordsMon 01 Aug 2022: 0 npm recordsTue 02 Aug 2022: 18 npm recordsWed 03 Aug 2022: 2 npm recordsThu 04 Aug 2022: 0 npm recordsFri 05 Aug 2022: 5 npm recordsSat 06 Aug 2022: 0 npm recordsSun 07 Aug 2022: 0 npm recordsMon 08 Aug 2022: 0 npm recordsTue 09 Aug 2022: 4 npm recordsWed 10 Aug 2022: 13 npm recordsThu 11 Aug 2022: 0 npm recordsFri 12 Aug 2022: 0 npm recordsSat 13 Aug 2022: 0 npm recordsSun 14 Aug 2022: 0 npm recordsMon 15 Aug 2022: 3 npm recordsTue 16 Aug 2022: 19 npm recordsWed 17 Aug 2022: 11 npm recordsThu 18 Aug 2022: 17 npm recordsFri 19 Aug 2022: 948 npm recordsSat 20 Aug 2022: 0 npm recordsSun 21 Aug 2022: 0 npm recordsMon 22 Aug 2022: 14 npm recordsTue 23 Aug 2022: 2 npm recordsWed 24 Aug 2022: 7 npm recordsThu 25 Aug 2022: 3 npm recordsFri 26 Aug 2022: 4 npm recordsSat 27 Aug 2022: 0 npm recordsSun 28 Aug 2022: 0 npm recordsMon 29 Aug 2022: 1 npm recordTue 30 Aug 2022: 8 npm recordsWed 31 Aug 2022: 0 npm recordsThu 01 Sep 2022: 1 npm recordFri 02 Sep 2022: 4 npm recordsSat 03 Sep 2022: 0 npm recordsSun 04 Sep 2022: 0 npm recordsMon 05 Sep 2022: 3 npm recordsTue 06 Sep 2022: 2 npm recordsWed 07 Sep 2022: 17 npm recordsThu 08 Sep 2022: 10 npm recordsFri 09 Sep 2022: 3 npm recordsSat 10 Sep 2022: 0 npm recordsSun 11 Sep 2022: 0 npm recordsMon 12 Sep 2022: 11 npm recordsTue 13 Sep 2022: 43 npm recordsWed 14 Sep 2022: 25 npm recordsThu 15 Sep 2022: 2 npm recordsFri 16 Sep 2022: 1 npm recordSat 17 Sep 2022: 0 npm recordsSun 18 Sep 2022: 2 npm recordsMon 19 Sep 2022: 4 npm recordsTue 20 Sep 2022: 0 npm recordsWed 21 Sep 2022: 15 npm recordsThu 22 Sep 2022: 1 npm recordFri 23 Sep 2022: 3 npm recordsSat 24 Sep 2022: 0 npm recordsSun 25 Sep 2022: 0 npm recordsMon 26 Sep 2022: 12 npm recordsTue 27 Sep 2022: 11 npm recordsWed 28 Sep 2022: 3 npm recordsThu 29 Sep 2022: 3 npm recordsFri 30 Sep 2022: 0 npm recordsSat 01 Oct 2022: 0 npm recordsSun 02 Oct 2022: 0 npm recordsMon 03 Oct 2022: 0 npm recordsTue 04 Oct 2022: 3 npm recordsWed 05 Oct 2022: 18 npm recordsThu 06 Oct 2022: 0 npm recordsFri 07 Oct 2022: 2 npm recordsSat 08 Oct 2022: 0 npm recordsSun 09 Oct 2022: 0 npm recordsMon 10 Oct 2022: 1 npm recordTue 11 Oct 2022: 1 npm recordWed 12 Oct 2022: 1 npm recordThu 13 Oct 2022: 0 npm recordsFri 14 Oct 2022: 0 npm recordsSat 15 Oct 2022: 0 npm recordsSun 16 Oct 2022: 0 npm recordsMon 17 Oct 2022: 1 npm recordTue 18 Oct 2022: 0 npm recordsWed 19 Oct 2022: 22 npm recordsThu 20 Oct 2022: 6 npm recordsFri 21 Oct 2022: 3 npm recordsSat 22 Oct 2022: 0 npm recordsSun 23 Oct 2022: 0 npm recordsMon 24 Oct 2022: 17 npm recordsTue 25 Oct 2022: 5 npm recordsWed 26 Oct 2022: 2 npm recordsThu 27 Oct 2022: 2 npm recordsFri 28 Oct 2022: 2 npm recordsSat 29 Oct 2022: 0 npm recordsSun 30 Oct 2022: 0 npm recordsMon 31 Oct 2022: 13 npm recordsTue 01 Nov 2022: 0 npm recordsWed 02 Nov 2022: 0 npm recordsThu 03 Nov 2022: 2 npm recordsFri 04 Nov 2022: 0 npm recordsSat 05 Nov 2022: 0 npm recordsSun 06 Nov 2022: 0 npm recordsMon 07 Nov 2022: 14 npm recordsTue 08 Nov 2022: 1 npm recordWed 09 Nov 2022: 4 npm recordsThu 10 Nov 2022: 2 npm recordsFri 11 Nov 2022: 0 npm recordsSat 12 Nov 2022: 0 npm recordsSun 13 Nov 2022: 0 npm recordsMon 14 Nov 2022: 7 npm recordsTue 15 Nov 2022: 3 npm recordsWed 16 Nov 2022: 1 npm recordThu 17 Nov 2022: 3 npm recordsFri 18 Nov 2022: 2 npm recordsSat 19 Nov 2022: 0 npm recordsSun 20 Nov 2022: 0 npm recordsMon 21 Nov 2022: 2 npm recordsTue 22 Nov 2022: 2 npm recordsWed 23 Nov 2022: 2 npm recordsThu 24 Nov 2022: 0 npm recordsFri 25 Nov 2022: 2 npm recordsSat 26 Nov 2022: 0 npm recordsSun 27 Nov 2022: 0 npm recordsMon 28 Nov 2022: 0 npm recordsTue 29 Nov 2022: 5 npm recordsWed 30 Nov 2022: 0 npm recordsThu 01 Dec 2022: 0 npm recordsFri 02 Dec 2022: 0 npm recordsSat 03 Dec 2022: 0 npm recordsSun 04 Dec 2022: 0 npm recordsMon 05 Dec 2022: 4 npm recordsTue 06 Dec 2022: 9 npm recordsWed 07 Dec 2022: 11 npm recordsThu 08 Dec 2022: 0 npm recordsFri 09 Dec 2022: 1 npm recordSat 10 Dec 2022: 0 npm recordsSun 11 Dec 2022: 0 npm recordsMon 12 Dec 2022: 9 npm recordsTue 13 Dec 2022: 2 npm recordsWed 14 Dec 2022: 1 npm recordThu 15 Dec 2022: 2 npm recordsFri 16 Dec 2022: 0 npm recordsSat 17 Dec 2022: 0 npm recordsSun 18 Dec 2022: 0 npm recordsMon 19 Dec 2022: 3 npm recordsTue 20 Dec 2022: 0 npm recordsWed 21 Dec 2022: 2 npm recordsThu 22 Dec 2022: 0 npm recordsFri 23 Dec 2022: 0 npm recordsSat 24 Dec 2022: 0 npm recordsSun 25 Dec 2022: 0 npm recordsMon 26 Dec 2022: 0 npm recordsTue 27 Dec 2022: 0 npm recordsWed 28 Dec 2022: 0 npm recordsThu 29 Dec 2022: 20 npm recordsFri 30 Dec 2022: 0 npm recordsSat 31 Dec 2022: 0 npm recordsSun 01 Jan 2023: 0 npm recordsMon 02 Jan 2023: 0 npm recordsTue 03 Jan 2023: 0 npm recordsWed 04 Jan 2023: 0 npm recordsThu 05 Jan 2023: 0 npm recordsFri 06 Jan 2023: 1 npm recordSat 07 Jan 2023: 0 npm recordsSun 08 Jan 2023: 0 npm recordsMon 09 Jan 2023: 11 npm recordsTue 10 Jan 2023: 36 npm recordsWed 11 Jan 2023: 14 npm recordsThu 12 Jan 2023: 0 npm recordsFri 13 Jan 2023: 5 npm recordsSat 14 Jan 2023: 0 npm recordsSun 15 Jan 2023: 0 npm recordsMon 16 Jan 2023: 2 npm recordsTue 17 Jan 2023: 1 npm recordWed 18 Jan 2023: 20 npm recordsThu 19 Jan 2023: 0 npm recordsFri 20 Jan 2023: 4 npm recordsSat 21 Jan 2023: 0 npm recordsSun 22 Jan 2023: 0 npm recordsMon 23 Jan 2023: 1 npm recordTue 24 Jan 2023: 3 npm recordsWed 25 Jan 2023: 3 npm recordsThu 26 Jan 2023: 6 npm recordsFri 27 Jan 2023: 1 npm recordSat 28 Jan 2023: 0 npm recordsSun 29 Jan 2023: 0 npm recordsMon 30 Jan 2023: 102 npm recordsTue 31 Jan 2023: 9 npm recordsWed 01 Feb 2023: 1 npm recordThu 02 Feb 2023: 21 npm recordsFri 03 Feb 2023: 7 npm recordsSat 04 Feb 2023: 4 npm recordsSun 05 Feb 2023: 6 npm recordsMon 06 Feb 2023: 17 npm recordsTue 07 Feb 2023: 8 npm recordsWed 08 Feb 2023: 1 npm recordThu 09 Feb 2023: 13 npm recordsFri 10 Feb 2023: 0 npm recordsSat 11 Feb 2023: 0 npm recordsSun 12 Feb 2023: 9 npm recordsMon 13 Feb 2023: 2 npm recordsTue 14 Feb 2023: 0 npm recordsWed 15 Feb 2023: 0 npm recordsThu 16 Feb 2023: 0 npm recordsFri 17 Feb 2023: 0 npm recordsSat 18 Feb 2023: 1 npm recordSun 19 Feb 2023: 0 npm recordsMon 20 Feb 2023: 5 npm recordsTue 21 Feb 2023: 1 npm recordWed 22 Feb 2023: 1 npm recordThu 23 Feb 2023: 17 npm recordsFri 24 Feb 2023: 2 npm recordsSat 25 Feb 2023: 9 npm recordsSun 26 Feb 2023: 0 npm recordsMon 27 Feb 2023: 4 npm recordsTue 28 Feb 2023: 4 npm recordsWed 01 Mar 2023: 6 npm recordsThu 02 Mar 2023: 0 npm recordsFri 03 Mar 2023: 0 npm recordsSat 04 Mar 2023: 1 npm recordSun 05 Mar 2023: 0 npm recordsMon 06 Mar 2023: 10 npm recordsTue 07 Mar 2023: 5 npm recordsWed 08 Mar 2023: 0 npm recordsThu 09 Mar 2023: 0 npm recordsFri 10 Mar 2023: 0 npm recordsSat 11 Mar 2023: 0 npm recordsSun 12 Mar 2023: 0 npm recordsMon 13 Mar 2023: 0 npm recordsTue 14 Mar 2023: 0 npm recordsWed 15 Mar 2023: 27 npm recordsThu 16 Mar 2023: 9 npm recordsFri 17 Mar 2023: 0 npm recordsSat 18 Mar 2023: 0 npm recordsSun 19 Mar 2023: 0 npm recordsMon 20 Mar 2023: 0 npm recordsTue 21 Mar 2023: 2 npm recordsWed 22 Mar 2023: 0 npm recordsThu 23 Mar 2023: 7 npm recordsFri 24 Mar 2023: 3 npm recordsSat 25 Mar 2023: 0 npm recordsSun 26 Mar 2023: 0 npm recordsMon 27 Mar 2023: 0 npm recordsTue 28 Mar 2023: 7 npm recordsWed 29 Mar 2023: 7 npm recordsThu 30 Mar 2023: 0 npm recordsFri 31 Mar 2023: 27 npm recordsSat 01 Apr 2023: 0 npm recordsSun 02 Apr 2023: 0 npm recordsMon 03 Apr 2023: 13 npm recordsTue 04 Apr 2023: 3 npm recordsWed 05 Apr 2023: 0 npm recordsThu 06 Apr 2023: 4 npm recordsFri 07 Apr 2023: 0 npm recordsSat 08 Apr 2023: 0 npm recordsSun 09 Apr 2023: 0 npm recordsMon 10 Apr 2023: 0 npm recordsTue 11 Apr 2023: 8 npm recordsWed 12 Apr 2023: 16 npm recordsThu 13 Apr 2023: 3 npm recordsFri 14 Apr 2023: 0 npm recordsSat 15 Apr 2023: 0 npm recordsSun 16 Apr 2023: 0 npm recordsMon 17 Apr 2023: 5 npm recordsTue 18 Apr 2023: 7 npm recordsWed 19 Apr 2023: 4 npm recordsThu 20 Apr 2023: 11 npm recordsFri 21 Apr 2023: 3 npm recordsSat 22 Apr 2023: 0 npm recordsSun 23 Apr 2023: 0 npm recordsMon 24 Apr 2023: 3 npm recordsTue 25 Apr 2023: 7 npm recordsWed 26 Apr 2023: 15 npm recordsThu 27 Apr 2023: 7 npm recordsFri 28 Apr 2023: 7 npm recordsSat 29 Apr 2023: 16 npm recordsSun 30 Apr 2023: 3 npm recordsMon 01 May 2023: 22 npm recordsTue 02 May 2023: 7 npm recordsWed 03 May 2023: 9 npm recordsThu 04 May 2023: 10 npm recordsFri 05 May 2023: 7 npm recordsSat 06 May 2023: 0 npm recordsSun 07 May 2023: 0 npm recordsMon 08 May 2023: 5 npm recordsTue 09 May 2023: 72 npm recordsWed 10 May 2023: 89 npm recordsThu 11 May 2023: 10 npm recordsFri 12 May 2023: 10 npm recordsSat 13 May 2023: 3 npm recordsSun 14 May 2023: 3 npm recordsMon 15 May 2023: 8 npm recordsTue 16 May 2023: 3 npm recordsWed 17 May 2023: 3 npm recordsThu 18 May 2023: 6 npm recordsFri 19 May 2023: 1 npm recordSat 20 May 2023: 2 npm recordsSun 21 May 2023: 1 npm recordMon 22 May 2023: 2 npm recordsTue 23 May 2023: 2 npm recordsWed 24 May 2023: 7 npm recordsThu 25 May 2023: 6 npm recordsFri 26 May 2023: 2 npm recordsSat 27 May 2023: 6 npm recordsSun 28 May 2023: 4 npm recordsMon 29 May 2023: 13 npm recordsTue 30 May 2023: 2 npm recordsWed 31 May 2023: 4 npm recordsThu 01 Jun 2023: 6 npm recordsFri 02 Jun 2023: 0 npm recordsSat 03 Jun 2023: 7 npm recordsSun 04 Jun 2023: 1 npm recordMon 05 Jun 2023: 17 npm recordsTue 06 Jun 2023: 50 npm recordsWed 07 Jun 2023: 2 npm recordsThu 08 Jun 2023: 1 npm recordFri 09 Jun 2023: 1 npm recordSat 10 Jun 2023: 0 npm recordsSun 11 Jun 2023: 0 npm recordsMon 12 Jun 2023: 2 npm recordsTue 13 Jun 2023: 14 npm recordsWed 14 Jun 2023: 8 npm recordsThu 15 Jun 2023: 5 npm recordsFri 16 Jun 2023: 6 npm recordsSat 17 Jun 2023: 1 npm recordSun 18 Jun 2023: 1 npm recordMon 19 Jun 2023: 10 npm recordsTue 20 Jun 2023: 5 npm recordsWed 21 Jun 2023: 10 npm recordsThu 22 Jun 2023: 9 npm recordsFri 23 Jun 2023: 4 npm recordsSat 24 Jun 2023: 7 npm recordsSun 25 Jun 2023: 0 npm recordsMon 26 Jun 2023: 1 npm recordTue 27 Jun 2023: 3 npm recordsWed 28 Jun 2023: 4 npm recordsThu 29 Jun 2023: 5 npm recordsFri 30 Jun 2023: 2 npm recordsSat 01 Jul 2023: 1 npm recordSun 02 Jul 2023: 2 npm recordsMon 03 Jul 2023: 6 npm recordsTue 04 Jul 2023: 20 npm recordsWed 05 Jul 2023: 3 npm recordsThu 06 Jul 2023: 4 npm recordsFri 07 Jul 2023: 1 npm recordSat 08 Jul 2023: 1 npm recordSun 09 Jul 2023: 5 npm recordsMon 10 Jul 2023: 11 npm recordsTue 11 Jul 2023: 7 npm recordsWed 12 Jul 2023: 20 npm recordsThu 13 Jul 2023: 1 npm recordFri 14 Jul 2023: 32 npm recordsSat 15 Jul 2023: 1 npm recordSun 16 Jul 2023: 3 npm recordsMon 17 Jul 2023: 8 npm recordsTue 18 Jul 2023: 7 npm recordsWed 19 Jul 2023: 3 npm recordsThu 20 Jul 2023: 4 npm recordsFri 21 Jul 2023: 4 npm recordsSat 22 Jul 2023: 0 npm recordsSun 23 Jul 2023: 0 npm recordsMon 24 Jul 2023: 12 npm recordsTue 25 Jul 2023: 15 npm recordsWed 26 Jul 2023: 11 npm recordsThu 27 Jul 2023: 13 npm recordsFri 28 Jul 2023: 9 npm recordsSat 29 Jul 2023: 2 npm recordsSun 30 Jul 2023: 2 npm recordsMon 31 Jul 2023: 37 npm recordsTue 01 Aug 2023: 14 npm recordsWed 02 Aug 2023: 4 npm recordsThu 03 Aug 2023: 2 npm recordsFri 04 Aug 2023: 3 npm recordsSat 05 Aug 2023: 3 npm recordsSun 06 Aug 2023: 2 npm recordsMon 07 Aug 2023: 9 npm recordsTue 08 Aug 2023: 14 npm recordsWed 09 Aug 2023: 12 npm recordsThu 10 Aug 2023: 7 npm recordsFri 11 Aug 2023: 4 npm recordsSat 12 Aug 2023: 0 npm recordsSun 13 Aug 2023: 3 npm recordsMon 14 Aug 2023: 16 npm recordsTue 15 Aug 2023: 12 npm recordsWed 16 Aug 2023: 10 npm recordsThu 17 Aug 2023: 2 npm recordsFri 18 Aug 2023: 0 npm recordsSat 19 Aug 2023: 7 npm recordsSun 20 Aug 2023: 13 npm recordsMon 21 Aug 2023: 27 npm recordsTue 22 Aug 2023: 12 npm recordsWed 23 Aug 2023: 3 npm recordsThu 24 Aug 2023: 21 npm recordsFri 25 Aug 2023: 11 npm recordsSat 26 Aug 2023: 3 npm recordsSun 27 Aug 2023: 4 npm recordsMon 28 Aug 2023: 13 npm recordsTue 29 Aug 2023: 14 npm recordsWed 30 Aug 2023: 2 npm recordsThu 31 Aug 2023: 24 npm recordsFri 01 Sep 2023: 14 npm recordsSat 02 Sep 2023: 6 npm recordsSun 03 Sep 2023: 2 npm recordsMon 04 Sep 2023: 0 npm recordsTue 05 Sep 2023: 5 npm recordsWed 06 Sep 2023: 3 npm recordsThu 07 Sep 2023: 1 npm recordFri 08 Sep 2023: 1 npm recordSat 09 Sep 2023: 1 npm recordSun 10 Sep 2023: 2 npm recordsMon 11 Sep 2023: 24 npm recordsTue 12 Sep 2023: 8 npm recordsWed 13 Sep 2023: 4 npm recordsThu 14 Sep 2023: 5 npm recordsFri 15 Sep 2023: 2 npm recordsSat 16 Sep 2023: 11 npm recordsSun 17 Sep 2023: 4 npm recordsMon 18 Sep 2023: 36 npm recordsTue 19 Sep 2023: 25 npm recordsWed 20 Sep 2023: 4 npm recordsThu 21 Sep 2023: 28 npm recordsFri 22 Sep 2023: 9 npm recordsSat 23 Sep 2023: 0 npm recordsSun 24 Sep 2023: 2 npm recordsMon 25 Sep 2023: 14 npm recordsTue 26 Sep 2023: 13 npm recordsWed 27 Sep 2023: 5 npm recordsThu 28 Sep 2023: 1 npm recordFri 29 Sep 2023: 3 npm recordsSat 30 Sep 2023: 0 npm recordsSun 01 Oct 2023: 1 npm recordMon 02 Oct 2023: 15 npm recordsTue 03 Oct 2023: 8 npm recordsWed 04 Oct 2023: 3 npm recordsThu 05 Oct 2023: 10 npm recordsFri 06 Oct 2023: 1 npm recordSat 07 Oct 2023: 0 npm recordsSun 08 Oct 2023: 1 npm recordMon 09 Oct 2023: 9 npm recordsTue 10 Oct 2023: 6 npm recordsWed 11 Oct 2023: 4 npm recordsThu 12 Oct 2023: 19 npm recordsFri 13 Oct 2023: 7 npm recordsSat 14 Oct 2023: 0 npm recordsSun 15 Oct 2023: 3 npm recordsMon 16 Oct 2023: 8 npm recordsTue 17 Oct 2023: 0 npm recordsWed 18 Oct 2023: 0 npm recordsThu 19 Oct 2023: 2 npm recordsFri 20 Oct 2023: 1 npm recordSat 21 Oct 2023: 1 npm recordSun 22 Oct 2023: 0 npm recordsMon 23 Oct 2023: 3 npm recordsTue 24 Oct 2023: 3 npm recordsWed 25 Oct 2023: 2 npm recordsThu 26 Oct 2023: 0 npm recordsFri 27 Oct 2023: 2 npm recordsSat 28 Oct 2023: 2 npm recordsSun 29 Oct 2023: 1 npm recordMon 30 Oct 2023: 2 npm recordsTue 31 Oct 2023: 4 npm recordsWed 01 Nov 2023: 10 npm recordsThu 02 Nov 2023: 5 npm recordsFri 03 Nov 2023: 1 npm recordSat 04 Nov 2023: 2 npm recordsSun 05 Nov 2023: 12 npm recordsMon 06 Nov 2023: 24 npm recordsTue 07 Nov 2023: 13 npm recordsWed 08 Nov 2023: 5 npm recordsThu 09 Nov 2023: 14 npm recordsFri 10 Nov 2023: 6 npm recordsSat 11 Nov 2023: 3 npm recordsSun 12 Nov 2023: 1 npm recordMon 13 Nov 2023: 4 npm recordsTue 14 Nov 2023: 2 npm recordsWed 15 Nov 2023: 3 npm recordsThu 16 Nov 2023: 4 npm recordsFri 17 Nov 2023: 8 npm recordsSat 18 Nov 2023: 7 npm recordsSun 19 Nov 2023: 2 npm recordsMon 20 Nov 2023: 6 npm recordsTue 21 Nov 2023: 16 npm recordsWed 22 Nov 2023: 1 npm recordThu 23 Nov 2023: 14 npm recordsFri 24 Nov 2023: 9 npm recordsSat 25 Nov 2023: 5 npm recordsSun 26 Nov 2023: 0 npm recordsMon 27 Nov 2023: 0 npm recordsTue 28 Nov 2023: 7 npm recordsWed 29 Nov 2023: 10 npm recordsThu 30 Nov 2023: 9 npm recordsFri 01 Dec 2023: 5 npm recordsSat 02 Dec 2023: 2 npm recordsSun 03 Dec 2023: 3 npm recordsMon 04 Dec 2023: 7 npm recordsTue 05 Dec 2023: 3 npm recordsWed 06 Dec 2023: 4 npm recordsThu 07 Dec 2023: 3 npm recordsFri 08 Dec 2023: 3 npm recordsSat 09 Dec 2023: 2 npm recordsSun 10 Dec 2023: 1 npm recordMon 11 Dec 2023: 8 npm recordsTue 12 Dec 2023: 2 npm recordsWed 13 Dec 2023: 2 npm recordsThu 14 Dec 2023: 7 npm recordsFri 15 Dec 2023: 4 npm recordsSat 16 Dec 2023: 2 npm recordsSun 17 Dec 2023: 0 npm recordsMon 18 Dec 2023: 3 npm recordsTue 19 Dec 2023: 17 npm recordsWed 20 Dec 2023: 6 npm recordsThu 21 Dec 2023: 2 npm recordsFri 22 Dec 2023: 8 npm recordsSat 23 Dec 2023: 1 npm recordSun 24 Dec 2023: 2 npm recordsMon 25 Dec 2023: 0 npm recordsTue 26 Dec 2023: 3 npm recordsWed 27 Dec 2023: 4 npm recordsThu 28 Dec 2023: 8 npm recordsFri 29 Dec 2023: 6 npm recordsSat 30 Dec 2023: 2 npm recordsSun 31 Dec 2023: 2 npm recordsMon 01 Jan 2024: 5 npm recordsTue 02 Jan 2024: 15 npm recordsWed 03 Jan 2024: 9 npm recordsThu 04 Jan 2024: 2 npm recordsFri 05 Jan 2024: 6 npm recordsSat 06 Jan 2024: 7 npm recordsSun 07 Jan 2024: 8 npm recordsMon 08 Jan 2024: 5 npm recordsTue 09 Jan 2024: 2 npm recordsWed 10 Jan 2024: 7 npm recordsThu 11 Jan 2024: 16 npm recordsFri 12 Jan 2024: 3 npm recordsSat 13 Jan 2024: 5 npm recordsSun 14 Jan 2024: 11 npm recordsMon 15 Jan 2024: 8 npm recordsTue 16 Jan 2024: 4 npm recordsWed 17 Jan 2024: 17 npm recordsThu 18 Jan 2024: 4 npm recordsFri 19 Jan 2024: 0 npm recordsSat 20 Jan 2024: 1 npm recordSun 21 Jan 2024: 9 npm recordsMon 22 Jan 2024: 13 npm recordsTue 23 Jan 2024: 5 npm recordsWed 24 Jan 2024: 750 npm recordsThu 25 Jan 2024: 3 npm recordsFri 26 Jan 2024: 0 npm recordsSat 27 Jan 2024: 1 npm recordSun 28 Jan 2024: 4 npm recordsMon 29 Jan 2024: 26 npm recordsTue 30 Jan 2024: 2 npm recordsWed 31 Jan 2024: 6 npm recordsThu 01 Feb 2024: 0 npm recordsFri 02 Feb 2024: 6 npm recordsSat 03 Feb 2024: 2 npm recordsSun 04 Feb 2024: 1 npm recordMon 05 Feb 2024: 5 npm recordsTue 06 Feb 2024: 3 npm recordsWed 07 Feb 2024: 12 npm recordsThu 08 Feb 2024: 1 npm recordFri 09 Feb 2024: 2 npm recordsSat 10 Feb 2024: 3 npm recordsSun 11 Feb 2024: 1 npm recordMon 12 Feb 2024: 8 npm recordsTue 13 Feb 2024: 1 npm recordWed 14 Feb 2024: 3 npm recordsThu 15 Feb 2024: 7 npm recordsFri 16 Feb 2024: 1 npm recordSat 17 Feb 2024: 0 npm recordsSun 18 Feb 2024: 6 npm recordsMon 19 Feb 2024: 6 npm recordsTue 20 Feb 2024: 5 npm recordsWed 21 Feb 2024: 6 npm recordsThu 22 Feb 2024: 2 npm recordsFri 23 Feb 2024: 0 npm recordsSat 24 Feb 2024: 1 npm recordSun 25 Feb 2024: 0 npm recordsMon 26 Feb 2024: 1 npm recordTue 27 Feb 2024: 4 npm recordsWed 28 Feb 2024: 2 npm recordsThu 29 Feb 2024: 3 npm recordsFri 01 Mar 2024: 2 npm recordsSat 02 Mar 2024: 1 npm recordSun 03 Mar 2024: 2 npm recordsMon 04 Mar 2024: 0 npm recordsTue 05 Mar 2024: 1 npm recordWed 06 Mar 2024: 2 npm recordsThu 07 Mar 2024: 2 npm recordsFri 08 Mar 2024: 6 npm recordsSat 09 Mar 2024: 8 npm recordsSun 10 Mar 2024: 3 npm recordsMon 11 Mar 2024: 1 npm recordTue 12 Mar 2024: 14 npm recordsWed 13 Mar 2024: 3 npm recordsThu 14 Mar 2024: 2 npm recordsFri 15 Mar 2024: 6 npm recordsSat 16 Mar 2024: 1 npm recordSun 17 Mar 2024: 3 npm recordsMon 18 Mar 2024: 15 npm recordsTue 19 Mar 2024: 8 npm recordsWed 20 Mar 2024: 0 npm recordsThu 21 Mar 2024: 6 npm recordsFri 22 Mar 2024: 0 npm recordsSat 23 Mar 2024: 0 npm recordsSun 24 Mar 2024: 8 npm recordsMon 25 Mar 2024: 0 npm recordsTue 26 Mar 2024: 2 npm recordsWed 27 Mar 2024: 8 npm recordsThu 28 Mar 2024: 0 npm recordsFri 29 Mar 2024: 4 npm recordsSat 30 Mar 2024: 1 npm recordSun 31 Mar 2024: 8 npm recordsMon 01 Apr 2024: 4 npm recordsTue 02 Apr 2024: 9 npm recordsWed 03 Apr 2024: 7 npm recordsThu 04 Apr 2024: 4 npm recordsFri 05 Apr 2024: 1 npm recordSat 06 Apr 2024: 1 npm recordSun 07 Apr 2024: 0 npm recordsMon 08 Apr 2024: 8 npm recordsTue 09 Apr 2024: 0 npm recordsWed 10 Apr 2024: 41 npm recordsThu 11 Apr 2024: 0 npm recordsFri 12 Apr 2024: 0 npm recordsSat 13 Apr 2024: 0 npm recordsSun 14 Apr 2024: 0 npm recordsMon 15 Apr 2024: 12 npm recordsTue 16 Apr 2024: 5 npm recordsWed 17 Apr 2024: 4 npm recordsThu 18 Apr 2024: 3 npm recordsFri 19 Apr 2024: 1 npm recordSat 20 Apr 2024: 0 npm recordsSun 21 Apr 2024: 0 npm recordsMon 22 Apr 2024: 17 npm recordsTue 23 Apr 2024: 2 npm recordsWed 24 Apr 2024: 5 npm recordsThu 25 Apr 2024: 0 npm recordsFri 26 Apr 2024: 0 npm recordsSat 27 Apr 2024: 0 npm recordsSun 28 Apr 2024: 0 npm recordsMon 29 Apr 2024: 5 npm recordsTue 30 Apr 2024: 5 npm recordsWed 01 May 2024: 4 npm recordsThu 02 May 2024: 7 npm recordsFri 03 May 2024: 3 npm recordsSat 04 May 2024: 3 npm recordsSun 05 May 2024: 2 npm recordsMon 06 May 2024: 8 npm recordsTue 07 May 2024: 0 npm recordsWed 08 May 2024: 10 npm recordsThu 09 May 2024: 3 npm recordsFri 10 May 2024: 0 npm recordsSat 11 May 2024: 1 npm recordSun 12 May 2024: 0 npm recordsMon 13 May 2024: 7 npm recordsTue 14 May 2024: 0 npm recordsWed 15 May 2024: 1 npm recordThu 16 May 2024: 0 npm recordsFri 17 May 2024: 0 npm recordsSat 18 May 2024: 0 npm recordsSun 19 May 2024: 3 npm recordsMon 20 May 2024: 9 npm recordsTue 21 May 2024: 2 npm recordsWed 22 May 2024: 0 npm recordsThu 23 May 2024: 0 npm recordsFri 24 May 2024: 2 npm recordsSat 25 May 2024: 2 npm recordsSun 26 May 2024: 0 npm recordsMon 27 May 2024: 2 npm recordsTue 28 May 2024: 2 npm recordsWed 29 May 2024: 2 npm recordsThu 30 May 2024: 5 npm recordsFri 31 May 2024: 1 npm recordSat 01 Jun 2024: 0 npm recordsSun 02 Jun 2024: 4 npm recordsMon 03 Jun 2024: 127 npm recordsTue 04 Jun 2024: 4 npm recordsWed 05 Jun 2024: 4 npm recordsThu 06 Jun 2024: 6 npm recordsFri 07 Jun 2024: 6 npm recordsSat 08 Jun 2024: 4 npm recordsSun 09 Jun 2024: 5 npm recordsMon 10 Jun 2024: 4 npm recordsTue 11 Jun 2024: 21 npm recordsWed 12 Jun 2024: 18 npm recordsThu 13 Jun 2024: 7 npm recordsFri 14 Jun 2024: 3 npm recordsSat 15 Jun 2024: 1 npm recordSun 16 Jun 2024: 0 npm recordsMon 17 Jun 2024: 6 npm recordsTue 18 Jun 2024: 15 npm recordsWed 19 Jun 2024: 2 npm recordsThu 20 Jun 2024: 14 npm recordsFri 21 Jun 2024: 0 npm recordsSat 22 Jun 2024: 1 npm recordSun 23 Jun 2024: 2 npm recordsMon 24 Jun 2024: 3 npm recordsTue 25 Jun 2024: 2,283 npm recordsWed 26 Jun 2024: 4 npm recordsThu 27 Jun 2024: 6 npm recordsFri 28 Jun 2024: 9 npm recordsSat 29 Jun 2024: 3 npm recordsSun 30 Jun 2024: 1 npm recordMon 01 Jul 2024: 7 npm recordsTue 02 Jul 2024: 2 npm recordsWed 03 Jul 2024: 9 npm recordsThu 04 Jul 2024: 317 npm recordsFri 05 Jul 2024: 3 npm recordsSat 06 Jul 2024: 9 npm recordsSun 07 Jul 2024: 0 npm recordsMon 08 Jul 2024: 7 npm recordsTue 09 Jul 2024: 5 npm recordsWed 10 Jul 2024: 5 npm recordsThu 11 Jul 2024: 286 npm recordsFri 12 Jul 2024: 12 npm recordsSat 13 Jul 2024: 4 npm recordsSun 14 Jul 2024: 3 npm recordsMon 15 Jul 2024: 10 npm recordsTue 16 Jul 2024: 8 npm recordsWed 17 Jul 2024: 4 npm recordsThu 18 Jul 2024: 4 npm recordsFri 19 Jul 2024: 2 npm recordsSat 20 Jul 2024: 2 npm recordsSun 21 Jul 2024: 4 npm recordsMon 22 Jul 2024: 11 npm recordsTue 23 Jul 2024: 2 npm recordsWed 24 Jul 2024: 6 npm recordsThu 25 Jul 2024: 10 npm recordsFri 26 Jul 2024: 0 npm recordsSat 27 Jul 2024: 17 npm recordsSun 28 Jul 2024: 7 npm recordsMon 29 Jul 2024: 13 npm recordsTue 30 Jul 2024: 3 npm recordsWed 31 Jul 2024: 13 npm recordsThu 01 Aug 2024: 16 npm recordsFri 02 Aug 2024: 0 npm recordsSat 03 Aug 2024: 0 npm recordsSun 04 Aug 2024: 0 npm recordsMon 05 Aug 2024: 10 npm recordsTue 06 Aug 2024: 9 npm recordsWed 07 Aug 2024: 104 npm recordsThu 08 Aug 2024: 1 npm recordFri 09 Aug 2024: 3 npm recordsSat 10 Aug 2024: 1 npm recordSun 11 Aug 2024: 4 npm recordsMon 12 Aug 2024: 1 npm recordTue 13 Aug 2024: 0 npm recordsWed 14 Aug 2024: 0 npm recordsThu 15 Aug 2024: 0 npm recordsFri 16 Aug 2024: 0 npm recordsSat 17 Aug 2024: 0 npm recordsSun 18 Aug 2024: 0 npm recordsMon 19 Aug 2024: 0 npm recordsTue 20 Aug 2024: 0 npm recordsWed 21 Aug 2024: 0 npm recordsThu 22 Aug 2024: 0 npm recordsFri 23 Aug 2024: 0 npm recordsSat 24 Aug 2024: 0 npm recordsSun 25 Aug 2024: 0 npm recordsMon 26 Aug 2024: 17 npm recordsTue 27 Aug 2024: 2 npm recordsWed 28 Aug 2024: 15 npm recordsThu 29 Aug 2024: 27 npm recordsFri 30 Aug 2024: 4 npm recordsSat 31 Aug 2024: 0 npm recordsSun 01 Sep 2024: 0 npm recordsMon 02 Sep 2024: 609 npm recordsTue 03 Sep 2024: 21 npm recordsWed 04 Sep 2024: 90 npm recordsThu 05 Sep 2024: 13 npm recordsFri 06 Sep 2024: 4 npm recordsSat 07 Sep 2024: 6 npm recordsSun 08 Sep 2024: 11 npm recordsMon 09 Sep 2024: 9 npm recordsTue 10 Sep 2024: 5 npm recordsWed 11 Sep 2024: 12 npm recordsThu 12 Sep 2024: 0 npm recordsFri 13 Sep 2024: 0 npm recordsSat 14 Sep 2024: 0 npm recordsSun 15 Sep 2024: 0 npm recordsMon 16 Sep 2024: 9 npm recordsTue 17 Sep 2024: 11 npm recordsWed 18 Sep 2024: 17 npm recordsThu 19 Sep 2024: 11 npm recordsFri 20 Sep 2024: 8 npm recordsSat 21 Sep 2024: 10 npm recordsSun 22 Sep 2024: 3 npm recordsMon 23 Sep 2024: 7 npm recordsTue 24 Sep 2024: 7 npm recordsWed 25 Sep 2024: 18 npm recordsThu 26 Sep 2024: 11 npm recordsFri 27 Sep 2024: 25 npm recordsSat 28 Sep 2024: 20 npm recordsSun 29 Sep 2024: 6 npm recordsMon 30 Sep 2024: 10 npm recordsTue 01 Oct 2024: 14 npm recordsWed 02 Oct 2024: 9 npm recordsThu 03 Oct 2024: 8 npm recordsFri 04 Oct 2024: 9 npm recordsSat 05 Oct 2024: 7 npm recordsSun 06 Oct 2024: 0 npm recordsMon 07 Oct 2024: 8 npm recordsTue 08 Oct 2024: 9 npm recordsWed 09 Oct 2024: 99 npm recordsThu 10 Oct 2024: 45 npm recordsFri 11 Oct 2024: 10 npm recordsSat 12 Oct 2024: 6 npm recordsSun 13 Oct 2024: 2 npm recordsMon 14 Oct 2024: 9 npm recordsTue 15 Oct 2024: 4 npm recordsWed 16 Oct 2024: 569 npm recordsThu 17 Oct 2024: 18 npm recordsFri 18 Oct 2024: 8 npm recordsSat 19 Oct 2024: 4 npm recordsSun 20 Oct 2024: 0 npm recordsMon 21 Oct 2024: 6 npm recordsTue 22 Oct 2024: 12 npm recordsWed 23 Oct 2024: 3 npm recordsThu 24 Oct 2024: 8 npm recordsFri 25 Oct 2024: 0 npm recordsSat 26 Oct 2024: 2 npm recordsSun 27 Oct 2024: 1 npm recordMon 28 Oct 2024: 15 npm recordsTue 29 Oct 2024: 10 npm recordsWed 30 Oct 2024: 31 npm recordsThu 31 Oct 2024: 6 npm recordsFri 01 Nov 2024: 7 npm recordsSat 02 Nov 2024: 7 npm recordsSun 03 Nov 2024: 12 npm recordsMon 04 Nov 2024: 18 npm recordsTue 05 Nov 2024: 36 npm recordsWed 06 Nov 2024: 27 npm recordsThu 07 Nov 2024: 55 npm recordsFri 08 Nov 2024: 29 npm recordsSat 09 Nov 2024: 2 npm recordsSun 10 Nov 2024: 12 npm recordsMon 11 Nov 2024: 4 npm recordsTue 12 Nov 2024: 35 npm recordsWed 13 Nov 2024: 36 npm recordsThu 14 Nov 2024: 42 npm recordsFri 15 Nov 2024: 34 npm recordsSat 16 Nov 2024: 32 npm recordsSun 17 Nov 2024: 6 npm recordsMon 18 Nov 2024: 5 npm recordsTue 19 Nov 2024: 3 npm recordsWed 20 Nov 2024: 24 npm recordsThu 21 Nov 2024: 9 npm recordsFri 22 Nov 2024: 10 npm recordsSat 23 Nov 2024: 7 npm recordsSun 24 Nov 2024: 13 npm recordsMon 25 Nov 2024: 42 npm recordsTue 26 Nov 2024: 26 npm recordsWed 27 Nov 2024: 140 npm recordsThu 28 Nov 2024: 10 npm recordsFri 29 Nov 2024: 30 npm recordsSat 30 Nov 2024: 3 npm recordsSun 01 Dec 2024: 18 npm recordsMon 02 Dec 2024: 4 npm recordsTue 03 Dec 2024: 3 npm recordsWed 04 Dec 2024: 15 npm recordsThu 05 Dec 2024: 18 npm recordsFri 06 Dec 2024: 7 npm recordsSat 07 Dec 2024: 12 npm recordsSun 08 Dec 2024: 101 npm recordsMon 09 Dec 2024: 181 npm recordsTue 10 Dec 2024: 19 npm recordsWed 11 Dec 2024: 14 npm recordsThu 12 Dec 2024: 27 npm recordsFri 13 Dec 2024: 18 npm recordsSat 14 Dec 2024: 23 npm recordsSun 15 Dec 2024: 14 npm recordsMon 16 Dec 2024: 18 npm recordsTue 17 Dec 2024: 18 npm recordsWed 18 Dec 2024: 16 npm recordsThu 19 Dec 2024: 147 npm recordsFri 20 Dec 2024: 17 npm recordsSat 21 Dec 2024: 9 npm recordsSun 22 Dec 2024: 7 npm recordsMon 23 Dec 2024: 15 npm recordsTue 24 Dec 2024: 7 npm recordsWed 25 Dec 2024: 8 npm recordsThu 26 Dec 2024: 6 npm recordsFri 27 Dec 2024: 18 npm recordsSat 28 Dec 2024: 0 npm recordsSun 29 Dec 2024: 3 npm recordsMon 30 Dec 2024: 6 npm recordsTue 31 Dec 2024: 9 npm recordsWed 01 Jan 2025: 1 npm recordThu 02 Jan 2025: 19 npm recordsFri 03 Jan 2025: 6 npm recordsSat 04 Jan 2025: 3 npm recordsSun 05 Jan 2025: 4 npm recordsMon 06 Jan 2025: 8 npm recordsTue 07 Jan 2025: 10 npm recordsWed 08 Jan 2025: 9 npm recordsThu 09 Jan 2025: 1 npm recordFri 10 Jan 2025: 4 npm recordsSat 11 Jan 2025: 0 npm recordsSun 12 Jan 2025: 2 npm recordsMon 13 Jan 2025: 20 npm recordsTue 14 Jan 2025: 30 npm recordsWed 15 Jan 2025: 4 npm recordsThu 16 Jan 2025: 2 npm recordsFri 17 Jan 2025: 0 npm recordsSat 18 Jan 2025: 4 npm recordsSun 19 Jan 2025: 9 npm recordsMon 20 Jan 2025: 122 npm recordsTue 21 Jan 2025: 67 npm recordsWed 22 Jan 2025: 27 npm recordsThu 23 Jan 2025: 19 npm recordsFri 24 Jan 2025: 215 npm recordsSat 25 Jan 2025: 3 npm recordsSun 26 Jan 2025: 4 npm recordsMon 27 Jan 2025: 4 npm recordsTue 28 Jan 2025: 11 npm recordsWed 29 Jan 2025: 6 npm recordsThu 30 Jan 2025: 79 npm recordsFri 31 Jan 2025: 50 npm recordsSat 01 Feb 2025: 3 npm recordsSun 02 Feb 2025: 0 npm recordsMon 03 Feb 2025: 364 npm recordsTue 04 Feb 2025: 0 npm recordsWed 05 Feb 2025: 0 npm recordsThu 06 Feb 2025: 0 npm recordsFri 07 Feb 2025: 27 npm recordsSat 08 Feb 2025: 2 npm recordsSun 09 Feb 2025: 0 npm recordsMon 10 Feb 2025: 5 npm recordsTue 11 Feb 2025: 18 npm recordsWed 12 Feb 2025: 5 npm recordsThu 13 Feb 2025: 88 npm recordsFri 14 Feb 2025: 0 npm recordsSat 15 Feb 2025: 0 npm recordsSun 16 Feb 2025: 0 npm recordsMon 17 Feb 2025: 75 npm recordsTue 18 Feb 2025: 13 npm recordsWed 19 Feb 2025: 34 npm recordsThu 20 Feb 2025: 3 npm recordsFri 21 Feb 2025: 7 npm recordsSat 22 Feb 2025: 5 npm recordsSun 23 Feb 2025: 38 npm recordsMon 24 Feb 2025: 0 npm recordsTue 25 Feb 2025: 0 npm recordsWed 26 Feb 2025: 0 npm recordsThu 27 Feb 2025: 2 npm recordsFri 28 Feb 2025: 86 npm recordsSat 01 Mar 2025: 17 npm recordsSun 02 Mar 2025: 9 npm recordsMon 03 Mar 2025: 336 npm recordsTue 04 Mar 2025: 89 npm recordsWed 05 Mar 2025: 54 npm recordsThu 06 Mar 2025: 17 npm recordsFri 07 Mar 2025: 0 npm recordsSat 08 Mar 2025: 1 npm recordSun 09 Mar 2025: 0 npm recordsMon 10 Mar 2025: 6 npm recordsTue 11 Mar 2025: 56 npm recordsWed 12 Mar 2025: 53 npm recordsThu 13 Mar 2025: 8 npm recordsFri 14 Mar 2025: 92 npm recordsSat 15 Mar 2025: 3 npm recordsSun 16 Mar 2025: 3 npm recordsMon 17 Mar 2025: 34 npm recordsTue 18 Mar 2025: 55 npm recordsWed 19 Mar 2025: 11 npm recordsThu 20 Mar 2025: 28 npm recordsFri 21 Mar 2025: 3 npm recordsSat 22 Mar 2025: 1 npm recordSun 23 Mar 2025: 3 npm recordsMon 24 Mar 2025: 13 npm recordsTue 25 Mar 2025: 103 npm recordsWed 26 Mar 2025: 5 npm recordsThu 27 Mar 2025: 5 npm recordsFri 28 Mar 2025: 168 npm recordsSat 29 Mar 2025: 4 npm recordsSun 30 Mar 2025: 7 npm recordsMon 31 Mar 2025: 11 npm recordsTue 01 Apr 2025: 3 npm recordsWed 02 Apr 2025: 55 npm recordsThu 03 Apr 2025: 44 npm recordsFri 04 Apr 2025: 6 npm recordsSat 05 Apr 2025: 3 npm recordsSun 06 Apr 2025: 3 npm recordsMon 07 Apr 2025: 30 npm recordsTue 08 Apr 2025: 8 npm recordsWed 09 Apr 2025: 29 npm recordsThu 10 Apr 2025: 0 npm recordsFri 11 Apr 2025: 1 npm recordSat 12 Apr 2025: 0 npm recordsSun 13 Apr 2025: 0 npm recordsMon 14 Apr 2025: 0 npm recordsTue 15 Apr 2025: 4 npm recordsWed 16 Apr 2025: 8 npm recordsThu 17 Apr 2025: 47 npm recordsFri 18 Apr 2025: 1 npm recordSat 19 Apr 2025: 8 npm recordsSun 20 Apr 2025: 1 npm recordMon 21 Apr 2025: 1 npm recordTue 22 Apr 2025: 2 npm recordsWed 23 Apr 2025: 133 npm recordsThu 24 Apr 2025: 8 npm recordsFri 25 Apr 2025: 10 npm recordsSat 26 Apr 2025: 4 npm recordsSun 27 Apr 2025: 0 npm recordsMon 28 Apr 2025: 22 npm recordsTue 29 Apr 2025: 30 npm recordsWed 30 Apr 2025: 17 npm recordsThu 01 May 2025: 10 npm recordsFri 02 May 2025: 21 npm recordsSat 03 May 2025: 4 npm recordsSun 04 May 2025: 4 npm recordsMon 05 May 2025: 34 npm recordsTue 06 May 2025: 50 npm recordsWed 07 May 2025: 36 npm recordsThu 08 May 2025: 7 npm recordsFri 09 May 2025: 4 npm recordsSat 10 May 2025: 11 npm recordsSun 11 May 2025: 8 npm recordsMon 12 May 2025: 27 npm recordsTue 13 May 2025: 7 npm recordsWed 14 May 2025: 19 npm recordsThu 15 May 2025: 62 npm recordsFri 16 May 2025: 68 npm recordsSat 17 May 2025: 7 npm recordsSun 18 May 2025: 14 npm recordsMon 19 May 2025: 72 npm recordsTue 20 May 2025: 9 npm recordsWed 21 May 2025: 88 npm recordsThu 22 May 2025: 76 npm recordsFri 23 May 2025: 134 npm recordsSat 24 May 2025: 5 npm recordsSun 25 May 2025: 6 npm recordsMon 26 May 2025: 69 npm recordsTue 27 May 2025: 59 npm recordsWed 28 May 2025: 14 npm recordsThu 29 May 2025: 7 npm recordsFri 30 May 2025: 15 npm recordsSat 31 May 2025: 15 npm recordsSun 01 Jun 2025: 11 npm recordsMon 02 Jun 2025: 18 npm recordsTue 03 Jun 2025: 14 npm recordsWed 04 Jun 2025: 44 npm recordsThu 05 Jun 2025: 8 npm recordsFri 06 Jun 2025: 16 npm recordsSat 07 Jun 2025: 29 npm recordsSun 08 Jun 2025: 2 npm recordsMon 09 Jun 2025: 12 npm recordsTue 10 Jun 2025: 142 npm recordsWed 11 Jun 2025: 12 npm recordsThu 12 Jun 2025: 32 npm recordsFri 13 Jun 2025: 29 npm recordsSat 14 Jun 2025: 9 npm recordsSun 15 Jun 2025: 31 npm recordsMon 16 Jun 2025: 16 npm recordsTue 17 Jun 2025: 26 npm recordsWed 18 Jun 2025: 86 npm recordsThu 19 Jun 2025: 19 npm recordsFri 20 Jun 2025: 23 npm recordsSat 21 Jun 2025: 4 npm recordsSun 22 Jun 2025: 5 npm recordsMon 23 Jun 2025: 20 npm recordsTue 24 Jun 2025: 18 npm recordsWed 25 Jun 2025: 49 npm recordsThu 26 Jun 2025: 34 npm recordsFri 27 Jun 2025: 18 npm recordsSat 28 Jun 2025: 29 npm recordsSun 29 Jun 2025: 18 npm recordsMon 30 Jun 2025: 28 npm recordsTue 01 Jul 2025: 49 npm recordsWed 02 Jul 2025: 62 npm recordsThu 03 Jul 2025: 32 npm recordsFri 04 Jul 2025: 26 npm recordsSat 05 Jul 2025: 21 npm recordsSun 06 Jul 2025: 11 npm recordsMon 07 Jul 2025: 4 npm recordsTue 08 Jul 2025: 59 npm recordsWed 09 Jul 2025: 32 npm recordsThu 10 Jul 2025: 51 npm recordsFri 11 Jul 2025: 7 npm recordsSat 12 Jul 2025: 18 npm recordsSun 13 Jul 2025: 10 npm recordsMon 14 Jul 2025: 25 npm recordsTue 15 Jul 2025: 120 npm recordsWed 16 Jul 2025: 15 npm recordsThu 17 Jul 2025: 21 npm recordsFri 18 Jul 2025: 7 npm recordsSat 19 Jul 2025: 4 npm recordsSun 20 Jul 2025: 41 npm recordsMon 21 Jul 2025: 22 npm recordsTue 22 Jul 2025: 86 npm recordsWed 23 Jul 2025: 32 npm recordsThu 24 Jul 2025: 35 npm recordsFri 25 Jul 2025: 24 npm recordsSat 26 Jul 2025: 20 npm recordsSun 27 Jul 2025: 0 npm recordsMon 28 Jul 2025: 35 npm recordsTue 29 Jul 2025: 13 npm recordsWed 30 Jul 2025: 68 npm recordsThu 31 Jul 2025: 80 npm recordsFri 01 Aug 2025: 22 npm recordsSat 02 Aug 2025: 8 npm recordsSun 03 Aug 2025: 16 npm recordsMon 04 Aug 2025: 8 npm recordsTue 05 Aug 2025: 6 npm recordsWed 06 Aug 2025: 13 npm recordsThu 07 Aug 2025: 6 npm recordsFri 08 Aug 2025: 16 npm recordsSat 09 Aug 2025: 8 npm recordsSun 10 Aug 2025: 3 npm recordsMon 11 Aug 2025: 16 npm recordsTue 12 Aug 2025: 10 npm recordsWed 13 Aug 2025: 29 npm recordsThu 14 Aug 2025: 34,202 npm recordsFri 15 Aug 2025: 12 npm recordsSat 16 Aug 2025: 3 npm recordsSun 17 Aug 2025: 25 npm recordsMon 18 Aug 2025: 1 npm recordTue 19 Aug 2025: 25 npm recordsWed 20 Aug 2025: 8 npm recordsThu 21 Aug 2025: 25 npm recordsFri 22 Aug 2025: 20 npm recordsSat 23 Aug 2025: 104 npm recordsSun 24 Aug 2025: 2 npm recordsMon 25 Aug 2025: 90 npm recordsTue 26 Aug 2025: 6 npm recordsWed 27 Aug 2025: 13 npm recordsThu 28 Aug 2025: 218 npm recordsFri 29 Aug 2025: 178 npm recordsSat 30 Aug 2025: 3 npm recordsSun 31 Aug 2025: 3 npm recordsMon 01 Sep 2025: 12 npm recordsTue 02 Sep 2025: 7 npm recordsWed 03 Sep 2025: 1 npm recordThu 04 Sep 2025: 10 npm recordsFri 05 Sep 2025: 4,726 npm recordsSat 06 Sep 2025: 1 npm recordSun 07 Sep 2025: 0 npm recordsMon 08 Sep 2025: 20 npm recordsTue 09 Sep 2025: 41 npm recordsWed 10 Sep 2025: 30 npm recordsThu 11 Sep 2025: 56 npm recordsFri 12 Sep 2025: 9 npm recordsSat 13 Sep 2025: 6 npm recordsSun 14 Sep 2025: 1 npm recordMon 15 Sep 2025: 86 npm recordsTue 16 Sep 2025: 200 npm recordsWed 17 Sep 2025: 33 npm recordsThu 18 Sep 2025: 5 npm recordsFri 19 Sep 2025: 13 npm recordsSat 20 Sep 2025: 0 npm recordsSun 21 Sep 2025: 0 npm recordsMon 22 Sep 2025: 39 npm recordsTue 23 Sep 2025: 23 npm recordsWed 24 Sep 2025: 8 npm recordsThu 25 Sep 2025: 61 npm recordsFri 26 Sep 2025: 160 npm recordsSat 27 Sep 2025: 4 npm recordsSun 28 Sep 2025: 3 npm recordsMon 29 Sep 2025: 20 npm recordsTue 30 Sep 2025: 4 npm recordsWed 01 Oct 2025: 2 npm recordsThu 02 Oct 2025: 27 npm recordsFri 03 Oct 2025: 6 npm recordsSat 04 Oct 2025: 21 npm recordsSun 05 Oct 2025: 2 npm recordsMon 06 Oct 2025: 31 npm recordsTue 07 Oct 2025: 106 npm recordsWed 08 Oct 2025: 80 npm recordsThu 09 Oct 2025: 177 npm recordsFri 10 Oct 2025: 45 npm recordsSat 11 Oct 2025: 1 npm recordSun 12 Oct 2025: 7 npm recordsMon 13 Oct 2025: 27 npm recordsTue 14 Oct 2025: 21 npm recordsWed 15 Oct 2025: 15 npm recordsThu 16 Oct 2025: 6 npm recordsFri 17 Oct 2025: 54 npm recordsSat 18 Oct 2025: 17 npm recordsSun 19 Oct 2025: 3 npm recordsMon 20 Oct 2025: 10 npm recordsTue 21 Oct 2025: 33 npm recordsWed 22 Oct 2025: 17 npm recordsThu 23 Oct 2025: 122 npm recordsFri 24 Oct 2025: 40 npm recordsSat 25 Oct 2025: 3 npm recordsSun 26 Oct 2025: 132 npm recordsMon 27 Oct 2025: 21 npm recordsTue 28 Oct 2025: 30 npm recordsWed 29 Oct 2025: 145 npm recordsThu 30 Oct 2025: 162 npm recordsFri 31 Oct 2025: 51 npm recordsSat 01 Nov 2025: 1 npm recordSun 02 Nov 2025: 19 npm recordsMon 03 Nov 2025: 19 npm recordsTue 04 Nov 2025: 5 npm recordsWed 05 Nov 2025: 21 npm recordsThu 06 Nov 2025: 2 npm recordsFri 07 Nov 2025: 14 npm recordsSat 08 Nov 2025: 2 npm recordsSun 09 Nov 2025: 334 npm recordsMon 10 Nov 2025: 11,995 npm recordsTue 11 Nov 2025: 76,854 npm recordsWed 12 Nov 2025: 46,770 npm recordsThu 13 Nov 2025: 5,144 npm recordsFri 14 Nov 2025: 5 npm recordsSat 15 Nov 2025: 1 npm recordSun 16 Nov 2025: 1 npm recordMon 17 Nov 2025: 50 npm recordsTue 18 Nov 2025: 19 npm recordsWed 19 Nov 2025: 11 npm recordsThu 20 Nov 2025: 18 npm recordsFri 21 Nov 2025: 2 npm recordsSat 22 Nov 2025: 21 npm recordsSun 23 Nov 2025: 1 npm recordMon 24 Nov 2025: 626 npm recordsTue 25 Nov 2025: 206 npm recordsWed 26 Nov 2025: 7 npm recordsThu 27 Nov 2025: 4 npm recordsFri 28 Nov 2025: 1 npm recordSat 29 Nov 2025: 7 npm recordsSun 30 Nov 2025: 3 npm recordsMon 01 Dec 2025: 84 npm recordsTue 02 Dec 2025: 24 npm recordsWed 03 Dec 2025: 346 npm recordsThu 04 Dec 2025: 14 npm recordsFri 05 Dec 2025: 39 npm recordsSat 06 Dec 2025: 11 npm recordsSun 07 Dec 2025: 3 npm recordsMon 08 Dec 2025: 5 npm recordsTue 09 Dec 2025: 12 npm recordsWed 10 Dec 2025: 31 npm recordsThu 11 Dec 2025: 103 npm recordsFri 12 Dec 2025: 24 npm recordsSat 13 Dec 2025: 0 npm recordsSun 14 Dec 2025: 1 npm recordMon 15 Dec 2025: 9 npm recordsTue 16 Dec 2025: 22 npm recordsWed 17 Dec 2025: 3 npm recordsThu 18 Dec 2025: 1 npm recordFri 19 Dec 2025: 67 npm recordsSat 20 Dec 2025: 3 npm recordsSun 21 Dec 2025: 2 npm recordsMon 22 Dec 2025: 12 npm recordsTue 23 Dec 2025: 189 npm recordsWed 24 Dec 2025: 3 npm recordsThu 25 Dec 2025: 7 npm recordsFri 26 Dec 2025: 3 npm recordsSat 27 Dec 2025: 5 npm recordsSun 28 Dec 2025: 2 npm recordsMon 29 Dec 2025: 3 npm recordsTue 30 Dec 2025: 26 npm recordsWed 31 Dec 2025: 13 npm recordsThu 01 Jan 2026: 3 npm recordsFri 02 Jan 2026: 18 npm recordsSat 03 Jan 2026: 2 npm recordsSun 04 Jan 2026: 2 npm recordsMon 05 Jan 2026: 11 npm recordsTue 06 Jan 2026: 38 npm recordsWed 07 Jan 2026: 47 npm recordsThu 08 Jan 2026: 19 npm recordsFri 09 Jan 2026: 16 npm recordsSat 10 Jan 2026: 9 npm recordsSun 11 Jan 2026: 2 npm recordsMon 12 Jan 2026: 33 npm recordsTue 13 Jan 2026: 11 npm recordsWed 14 Jan 2026: 2 npm recordsThu 15 Jan 2026: 1 npm recordFri 16 Jan 2026: 63 npm recordsSat 17 Jan 2026: 3 npm recordsSun 18 Jan 2026: 0 npm recordsMon 19 Jan 2026: 22 npm recordsTue 20 Jan 2026: 22 npm recordsWed 21 Jan 2026: 63 npm recordsThu 22 Jan 2026: 17 npm recordsFri 23 Jan 2026: 27 npm recordsSat 24 Jan 2026: 0 npm recordsSun 25 Jan 2026: 6 npm recordsMon 26 Jan 2026: 4 npm recordsTue 27 Jan 2026: 30 npm recordsWed 28 Jan 2026: 42 npm recordsThu 29 Jan 2026: 6 npm recordsFri 30 Jan 2026: 5 npm recordsSat 31 Jan 2026: 3 npm recordsSun 01 Feb 2026: 0 npm recordsMon 02 Feb 2026: 18 npm recordsTue 03 Feb 2026: 45 npm recordsWed 04 Feb 2026: 35 npm recordsThu 05 Feb 2026: 21 npm recordsFri 06 Feb 2026: 31 npm recordsSat 07 Feb 2026: 0 npm recordsSun 08 Feb 2026: 0 npm recordsMon 09 Feb 2026: 5 npm recordsTue 10 Feb 2026: 14 npm recordsWed 11 Feb 2026: 9 npm recordsThu 12 Feb 2026: 4 npm recordsFri 13 Feb 2026: 17 npm recordsSat 14 Feb 2026: 0 npm recordsSun 15 Feb 2026: 3 npm recordsMon 16 Feb 2026: 5 npm recordsTue 17 Feb 2026: 2 npm recordsWed 18 Feb 2026: 2 npm recordsThu 19 Feb 2026: 2 npm recordsFri 20 Feb 2026: 25 npm recordsSat 21 Feb 2026: 1 npm recordSun 22 Feb 2026: 13 npm recordsMon 23 Feb 2026: 5 npm recordsTue 24 Feb 2026: 22 npm recordsWed 25 Feb 2026: 17 npm recordsThu 26 Feb 2026: 12 npm recordsFri 27 Feb 2026: 20 npm recordsSat 28 Feb 2026: 2 npm recordsSun 01 Mar 2026: 5 npm recordsMon 02 Mar 2026: 35 npm recordsTue 03 Mar 2026: 78 npm recordsWed 04 Mar 2026: 6 npm recordsThu 05 Mar 2026: 15 npm recordsFri 06 Mar 2026: 13 npm recordsSat 07 Mar 2026: 0 npm recordsSun 08 Mar 2026: 0 npm recordsMon 09 Mar 2026: 4 npm recordsTue 10 Mar 2026: 26 npm recordsWed 11 Mar 2026: 20 npm recordsThu 12 Mar 2026: 24 npm recordsFri 13 Mar 2026: 38 npm recordsSat 14 Mar 2026: 3 npm recordsSun 15 Mar 2026: 8 npm recordsMon 16 Mar 2026: 115 npm recordsTue 17 Mar 2026: 7 npm recordsWed 18 Mar 2026: 299 npm recordsThu 19 Mar 2026: 15 npm recordsFri 20 Mar 2026: 57 npm recordsSat 21 Mar 2026: 10 npm recordsSun 22 Mar 2026: 59 npm recordsMon 23 Mar 2026: 23 npm recordsTue 24 Mar 2026: 98 npm recordsWed 25 Mar 2026: 29 npm recordsThu 26 Mar 2026: 33 npm recordsFri 27 Mar 2026: 11 npm recordsSat 28 Mar 2026: 3 npm recordsSun 29 Mar 2026: 7 npm recordsMon 30 Mar 2026: 2 npm recordsTue 31 Mar 2026: 4 npm recordsWed 01 Apr 2026: 10 npm recordsThu 02 Apr 2026: 23 npm recordsFri 03 Apr 2026: 39 npm recordsSat 04 Apr 2026: 0 npm recordsSun 05 Apr 2026: 5 npm recordsMon 06 Apr 2026: 9 npm recordsTue 07 Apr 2026: 7 npm recordsWed 08 Apr 2026: 5 npm recordsThu 09 Apr 2026: 6 npm recordsFri 10 Apr 2026: 3 npm recordsSat 11 Apr 2026: 17 npm recordsSun 12 Apr 2026: 19 npm recordsMon 13 Apr 2026: 44 npm recordsTue 14 Apr 2026: 40 npm recordsWed 15 Apr 2026: 48 npm recordsThu 16 Apr 2026: 113 npm recordsFri 17 Apr 2026: 12 npm recordsSat 18 Apr 2026: 12 npm recordsSun 19 Apr 2026: 7 npm recordsMon 20 Apr 2026: 20 npm recordsTue 21 Apr 2026: 4 npm recordsWed 22 Apr 2026: 31 npm recordsThu 23 Apr 2026: 19 npm recordsFri 24 Apr 2026: 10 npm recordsSat 25 Apr 2026: 25 npm recordsSun 26 Apr 2026: 11 npm recordsMon 27 Apr 2026: 19 npm recordsTue 28 Apr 2026: 2 npm recordsWed 29 Apr 2026: 52 npm recordsThu 30 Apr 2026: 7 npm recordsFri 01 May 2026: 10 npm recordsSat 02 May 2026: 5 npm recordsSun 03 May 2026: 20 npm recordsMon 04 May 2026: 43 npm recordsTue 05 May 2026: 10 npm recordsWed 06 May 2026: 8 npm recordsThu 07 May 2026: 9 npm recordsFri 08 May 2026: 11 npm recordsSat 09 May 2026: 4 npm recordsSun 10 May 2026: 8 npm recordsMon 11 May 2026: 32 npm recordsTue 12 May 2026: 173 npm recordsWed 13 May 2026: 29 npm recordsThu 14 May 2026: 48 npm recordsFri 15 May 2026: 25 npm recordsSat 16 May 2026: 11 npm recordsSun 17 May 2026: 7 npm recordsMon 18 May 2026: 11 npm recordsTue 19 May 2026: 353 npm recordsWed 20 May 2026: 95 npm recordsThu 21 May 2026: 68 npm recordsFri 22 May 2026: 49 npm recordsSat 23 May 2026: 29 npm recordsSun 24 May 2026: 18 npm recordsMon 25 May 2026: 98 npm recordsTue 26 May 2026: 63 npm recordsWed 27 May 2026: 5 npm recordsThu 28 May 2026: 188 npm recordsFri 29 May 2026: 56 npm recordsSat 30 May 2026: 3 npm recordsSun 31 May 2026: 2 npm recordsMon 01 Jun 2026: 53 npm recordsTue 02 Jun 2026: 8 npm recordsWed 03 Jun 2026: 5 npm recordsThu 04 Jun 2026: 10 npm recordsFri 05 Jun 2026: 76 npm recordsSat 06 Jun 2026: 4 npm recordsSun 07 Jun 2026: 4 npm recordsMon 08 Jun 2026: 9 npm recordsTue 09 Jun 2026: 139 npm recordsWed 10 Jun 2026: 42 npm recordsThu 11 Jun 2026: 124 npm recordsFri 12 Jun 2026: 36 npm recordsSat 13 Jun 2026: 30 npm recordsSun 14 Jun 2026: 10 npm recordsMon 15 Jun 2026: 55 npm recordsTue 16 Jun 2026: 82 npm recordsWed 17 Jun 2026: 188 npm recordsThu 18 Jun 2026: 53 npm recordsFri 19 Jun 2026: 45 npm recordsSat 20 Jun 2026: 12 npm recordsSun 21 Jun 2026: 7 npm recordsMon 22 Jun 2026: 25 npm recordsTue 23 Jun 2026: 70 npm recordsWed 24 Jun 2026: 64 npm recordsThu 25 Jun 2026: 60 npm recordsFri 26 Jun 2026: 50 npm recordsSat 27 Jun 2026: 5 npm recordsSun 28 Jun 2026: 8 npm recordsMon 29 Jun 2026: 110 npm recordsTue 30 Jun 2026: 30 npm recordsWed 01 Jul 2026: 22 npm recordsThu 02 Jul 2026: 34 npm recordsFri 03 Jul 2026: 11 npm recordsSat 04 Jul 2026: 4 npm recordsSun 05 Jul 2026: 5 npm recordsMon 06 Jul 2026: 130 npm recordsTue 07 Jul 2026: 461 npm recordsWed 08 Jul 2026: 51 npm recordsThu 09 Jul 2026: 116 npm recordsFri 10 Jul 2026: 72 npm recordsSat 11 Jul 2026: 7 npm recordsSun 12 Jul 2026: 16 npm recordsMon 13 Jul 2026: 284 npm recordsTue 14 Jul 2026: 100 npm recordsWed 15 Jul 2026: 52 npm recordsThu 16 Jul 2026: 61 npm recordsFri 17 Jul 2026: 7 npm recordsSat 18 Jul 2026: 1 npm recordSun 19 Jul 2026: 2 npm recordsMon 20 Jul 2026: 158 npm recordsTue 21 Jul 2026: 22 npm recordsWed 22 Jul 2026: 27 npm recordsThu 23 Jul 2026: 18 npm recordsFri 24 Jul 2026: 6 npm recordsSat 25 Jul 2026: 15 npm recordsSun 26 Jul 2026: 0 npm recordsMon 27 Jul 2026: 30 npm recordsTue 28 Jul 2026: 55 npm recordsWed 29 Jul 2026: 25 npm recordsThu 30 Jul 2026: 199 npm recordsFri 31 Jul 2026: 65 npm recordsSat 01 Aug 2026: 10 npm recordsSun 02 Aug 2026: 6 npm recordsMon 03 Aug 2026: 14 npm recordsTue 04 Aug 2026: 503 npm recordsWed 05 Aug 2026: 1,352 npm recordsThu 06 Aug 2026: 94 npm recordsFri 07 Aug 2026: 137 npm recordsSat 08 Aug 2026: 46 npm recordsSun 09 Aug 2026: 0 npm recordsMon 10 Aug 2026: 42 npm recordsTue 11 Aug 2026: 43 npm recordsWed 12 Aug 2026: 152 npm recordsThu 13 Aug 2026: 85 npm recordsFri 14 Aug 2026: 60 npm recordsSat 15 Aug 2026: 19 npm recordsSun 16 Aug 2026: 0 npm recordsMon 17 Aug 2026: 17 npm recordsTue 18 Aug 2026: 64 npm recordsWed 19 Aug 2026: 126 npm recordsThu 20 Aug 2026: 17 npm recordsFri 21 Aug 2026: 13 npm recordsSat 22 Aug 2026: 4 npm recordsSun 23 Aug 2026: 32 npm recordsMon 24 Aug 2026: 64 npm recordsTue 25 Aug 2026: 73 npm recordsWed 26 Aug 2026: 43 npm recordsThu 27 Aug 2026: 25 npm recordsFri 28 Aug 2026: 958 npm recordsSat 29 Aug 2026: 27 npm recordsSun 30 Aug 2026: 22 npm recordsMon 31 Aug 2026: 30 npm recordsTue 01 Sep 2026: 33 npm recordsWed 02 Sep 2026: 16 npm recordsThu 03 Sep 2026: 48 npm recordsFri 04 Sep 2026: 39 npm recordsSat 05 Sep 2026: 45 npm recordsSun 06 Sep 2026: 19 npm recordsMon 07 Sep 2026: 28 npm recordsTue 08 Sep 2026: 14 npm recordsWed 09 Sep 2026: 52 npm recordsThu 10 Sep 2026: 12 npm recordsFri 11 Sep 2026: 6 npm recordsSat 12 Sep 2026: 7 npm recordsSun 13 Sep 2026: 0 npm recordsMon 14 Sep 2026: 25 npm recordsTue 15 Sep 2026: 27 npm recordsWed 16 Sep 2026: 38 npm recordsThu 17 Sep 2026: 20 npm recordsFri 18 Sep 2026: 21 npm recordsSat 19 Sep 2026: 1 npm recordSun 20 Sep 2026: 3 npm recordsMon 21 Sep 2026: 68 npm recordsTue 22 Sep 2026: 93 npm recordsWed 23 Sep 2026: 61 npm recordsThu 24 Sep 2026: 16 npm recordsFri 25 Sep 2026: 17 npm recordsSat 26 Sep 2026: 2 npm recordsSun 27 Sep 2026: 0 npm recordsMon 28 Sep 2026: 39 npm recordsTue 29 Sep 2026: 63 npm recordsWed 30 Sep 2026: 42 npm recordsThu 01 Oct 2026: 5 npm recordsFri 02 Oct 2026: 7 npm recordsSat 03 Oct 2026: 9 npm recordsSun 04 Oct 2026: 54 npm recordsMon 05 Oct 2026: 56 npm recordsTue 06 Oct 2026: 10 npm recordsWed 07 Oct 2026: 15 npm recordsThu 08 Oct 2026: 71 npm recordsFri 09 Oct 2026: 43 npm recordsSat 10 Oct 2026: 1 npm recordSun 11 Oct 2026: 24 npm recordsMon 12 Oct 2026: 57 npm recordsTue 13 Oct 2026: 2 npm records

Records per day by OSV “published” date, npm only. Totals under each year. Outlined squares are after our retrieval date. Source: OpenSSF malicious-packages repository, our count.

The calendar is mostly light and mid blue: on a typical day in 2026 the database adds a few dozen npm records. Only 9 days crossed 1,000 records, and each one has an explanation in the records themselves. The largest was 11 November 2025, with 76,854. The four red days from 10 to 13 November 2025 are the tea.xyz token-farming campaign that Amazon Inspector reported. 14 August (34,202) and 5 September 2025 (4,726) are bulk uploads published at a single second. 20 June 2022 (4,691) is GitHub’s malware advisory feed. On 25 June 2024 (2,283), ReversingLabs filed records whose names advertise free movies, game currency, and gift-card generators. 5 August 2026 (1,352), the day after the keyv worm, is mostly Amazon Inspector records describing install-time droppers.

What the 222,159 records actually are

Token farming (tea.xyz): 140,728 records (63.3%)Bulk uploads with no detail: 38,805 records (17.5%)Individually described reports: 42,626 records (19.2%)63.3%Token farming (tea.xyz)140,728 records17.5%Bulk uploads with no detail38,805 records19.2%Individually described reports42,626 records

Token farming: record text names the tea.xyz campaign or tea protocol. Bulk uploads: non-token-farming records sharing one publish timestamp with 500 or more others. Everything else is counted as individually described.

Headline counts of malicious npm packages are dominated by spam. 140,728 records (63.3%) describe packages built to farm tea.xyz rewards: no functional code, auto-publishing scripts, and randomized names. Amazon Inspector, which filed them, says it identified over 150,000 such packages in an investigation that ran from 8 to 12 November 2025 and submitted them to the OpenSSF repository. Another 38,805 records (17.5%) arrived in two bulk uploads, on 14 August and 5 September 2025, whose records say only that the package “was found to contain malicious code.”

That leaves 42,626 individually described records over five years. This is the series to watch for real attack activity, and it is the one we chart next.

Malicious npm packages per month

2022 to 20252026October 2026, 13 days only

01,0002,0003,0004,0005,000Jan 2022: 1 individually described recordsFeb 2022: 0 individually described recordsMar 2022: 0 individually described recordsApr 2022: 0 individually described recordsMay 2022: 196 individually described recordsJun 2022: 4,943 individually described recordsJul 2022: 814 individually described recordsAug 2022: 1,079 individually described recordsSep 2022: 176 individually described recordsOct 2022: 99 individually described recordsNov 2022: 52 individually described recordsDec 2022: 64 individually described recordsJan 2023: 219 individually described recordsFeb 2023: 133 individually described recordsMar 2023: 111 individually described recordsApr 2023: 135 individually described recordsMay 2023: 319 individually described recordsJun 2023: 182 individually described recordsJul 2023: 245 individually described recordsAug 2023: 271 individually described recordsSep 2023: 233 individually described recordsOct 2023: 118 individually described recordsNov 2023: 203 individually described recordsDec 2023: 122 individually described recordsJan 2024: 954 individually described recordsFeb 2024: 92 individually described recordsMar 2024: 117 individually described recordsApr 2024: 134 individually described recordsMay 2024: 79 individually described recordsJun 2024: 2,563 individually described recordsJul 2024: 785 individually described recordsAug 2024: 214 individually described recordsSep 2024: 953 individually described recordsOct 2024: 932 individually described recordsNov 2024: 716 individually described recordsDec 2024: 778 individually described recordsJan 2025: 743 individually described recordsFeb 2025: 775 individually described recordsMar 2025: 1,195 individually described recordsApr 2025: 478 individually described recordsMay 2025: 962 individually described recordsJun 2025: 802 individually described recordsJul 2025: 1,030 individually described recordsAug 2025: 933 individually described recordsSep 2025: 940 individually described recordsOct 2025: 1,414 individually described recordsNov 2025: 1,435 individually described recordsDec 2025: 1,067 individually described recordsJan 2026: 527 individually described recordsFeb 2026: 330 individually described recordsMar 2026: 1,047 individually described recordsApr 2026: 619 individually described recordsMay 2026: 1,491 individually described recordsJun 2026: 1,414 individually described recordsJul 2026: 2,056 individually described recordsAug 2026: 4,078 individually described recordsSep 2026: 855 individually described recordsOct 2026: 354 individually described records (1 to 13 Oct only)20222023202420252026

Individually described npm records per month (token farming and the two bulk uploads removed), by OSV published date.

The busiest month in this series was June 2022, with 4,943 records, 4,691 of them from GitHub’s malware advisory feed on a single day, 20 June. In 2026 the peak was August, with 4,078, the month of the keyv worm. From January to September 2026 the database published 12,417 individually described npm records, against 7,858 in the same months of 2025, a change of +58%. Counting every record, the comparison runs the other way (12,417 against 46,663) because the 2025 figure includes both bulk uploads. That gap is why raw totals are a poor measure of attack activity.

We then tested whether the 2026 rise in individually described records reflects more attacks or more reporting. It is mostly one reporter. Records crediting Amazon Inspector went from 2,699 to 9,626 in those nine months, while records crediting anyone else fell from 5,159 to 2,791. The data shows more reporting by one contributor; it cannot show whether more malicious npm packages are being published.

Publish dates measure when a report reached the database, not when the package went live on npm. A surge in a month can mean more attacks or more reporting, and the data cannot separate the two.

npm against PyPI and other ecosystems

npm (all records)npm (all records): 222,159 records222,159npm minus token farmingnpm minus token farming: 81,431 records81,431PyPIPyPI: 11,798 records11,798RubyGemsRubyGems: 4,304 records4,304NuGetNuGet: 782 records782crates.iocrates.io: 21 records21GoGo: 20 records20Open VSXOpen VSX: 17 records17VS CodeVS Code: 4 records4MavenMaven: 2 records2GitGit: 1 records1PackagistPackagist: 1 records1

All malicious records in the OpenSSF database by ecosystem directory, snapshot of 13 October 2026.

npm accounts for 92.9% of the 239,109 malicious package records in the database. PyPI is a distant second with 11,798, then RubyGems with 4,304 and NuGet with 782. Removing the token-farming flood does not change the order: npm still has 81,431 records, 6.9 times PyPI. The year rows show one other jump worth watching: RubyGems went from 129 records in 2025 to 3,368 so far in 2026.

Year npm PyPI RubyGems NuGet Other npm: token farming npm: bulk uploads npm: individually described
2022 7,424 20 0 0 1 0 0 7,424
2023 2,291 6,467 16 0 1 0 0 2,291
2024 8,317 2,645 791 738 0 0 0 8,317
2025 191,307 1,245 129 22 27 140,728 38,805 11,774
2026* 12,771 1,421 3,368 22 35 0 0 12,771

*2026 is 1 January to 13 October. 46 records with no published date and 5 from 2021 are excluded from the year rows.

The largest incident waves

We matched waves to records using text in the records themselves (for example, every record that names Sha1-Hulud) or a date window, then checked each against the primary source. Counts are OpenSSF records, which can be lower than the number of packages a vendor or registry reports.

Date Wave and how we matched it Records What the primary source says Primary source
10 to 13 Nov 2025 tea.xyz token-farming flood
Record text names the tea.xyz token reward campaign
140,728 Amazon Inspector says it identified over 150,000 packages tied to the campaign, investigated 8 to 12 November, and submitted them to OpenSSF. AWS Security Blog
14 Aug 2025 Single bulk upload, no campaign detail
One publish timestamp, all credited to Amazon Inspector
34,166 Each record carries only the line “was found to contain malicious code”; no public write-up is linked. OpenSSF malicious-packages
20 Jun 2022 GitHub malware advisory feed, single day
All records published that day (source feed: ghsa-malware)
4,691 Largest single day before 2025; records carry GitHub’s standard malware advisory text. GitHub Advisory Database
5 Sep 2025 Second bulk upload, no campaign detail
One publish timestamp, all credited to Amazon Inspector
4,639 Same generic record text as the August upload. OpenSSF malicious-packages
24 to 26 Nov 2025 Sha1-Hulud: The Second Coming
Record text names Sha1-Hulud
792 GitHub malware advisories published 24 November 2025 for packages including @zapier/zapier-sdk. GHSA-hxq5-5w35-rmpp
4 Aug 2026 keyv and cacheable worm (“Here We Go Again”)
Record text names the wave
444 The keyv record says the poisoned versions shipped with a valid, signed provenance attestation and the worm poisoned 400+ packages. GHSA-3p9h-f68w-m6fx
OSV MAL-2026-11524
19 May 2026 @antv packages via the atool account
Record text names the atool account
317 The OpenSSF records say 631 malicious versions across 314 packages were published in a 22-minute burst. GHSA-hqrw-phww-294v
15 to 18 Sep 2025 Shai-Hulud worm
Record text names Shai-Hulud
203 GitHub says it was notified on 14 September and removed 500+ compromised packages; CISA’s alert of 23 September says over 500 packages. CISA alert
GitHub blog
11 May 2026 TanStack (Mini Shai-Hulud)
@tanstack/ records, May 2026
42 TanStack’s postmortem: 84 malicious versions across 42 @tanstack packages, published 19:20 to 19:26 UTC via a stolen GitHub Actions OIDC token. TanStack postmortem
8 Sep 2025 chalk and debug maintainer phishing
All npm records published that day
20 The debug advisory says the publishing account was taken over after a phishing attack on 8 September and the malware redirected cryptocurrency transactions. debug advisory GHSA-4×49-vf9v-38px
chalk issue #656
31 Mar 2026 axios hijack (plain-crypto-js)
Records for axios and plain-crypto-js
2 CISA: axios 1.14.1 and 0.30.4 pulled in plain-crypto-js 4.2.1, which downloads a remote access trojan. CISA alert
GHSA-fw8c-xr5c-95f9

The five worm waves (Shai-Hulud, Sha1-Hulud, TanStack, @antv, and keyv) add up to 1,798 records, less than 1% of the database. Their reach is the opposite of their count: the keyv wave alone hit keyv, flat-cache, and file-entry-cache, which together had 2.2 billion downloads last month. For Shai-Hulud, the database has 203 records naming the worm, while GitHub says it removed more than 500 compromised packages: the OpenSSF count is a floor, not a census.

Hijacked packages in the npm top 1,000

We checked every malicious record against the 1,000 most-downloaded npm packages (ecosyste.ms ranking by last-month downloads). 19 records name one exactly. These are not lookalikes: each record lists specific malicious versions of a legitimate, heavily used package. Together the 19 packages had 25.4 billion downloads in the last month.

Package Download rank Downloads, last month Record published Malicious versions Record
eslint-config-prettier 809 284M 2025-07-21 8.10.1, 9.1.1, 10.1.6, 10.1.7 MAL-2025-6022
napi-postinstall 949 250M 2025-07-21 0.3.1 MAL-2025-6025
debug 3 3,112M 2025-09-08 4.4.2 MAL-2025-46974
ansi-styles 4 3,092M 2025-09-08 6.2.2 MAL-2025-46967
strip-ansi 9 2,340M 2025-09-08 7.1.1 MAL-2025-46980
ansi-regex 10 2,308M 2025-09-08 6.2.1 MAL-2025-46966
supports-color 12 2,265M 2025-09-08 10.2.1 MAL-2025-46981
chalk 14 2,135M 2025-09-08 5.6.1 MAL-2025-46969
wrap-ansi 15 2,019M 2025-09-08 9.0.1 MAL-2025-46983
color-name 26 1,613M 2025-09-08 2.0.1 MAL-2025-46972
color-convert 28 1,557M 2025-09-08 3.1.1 MAL-2025-46971
is-arrayish 361 524M 2025-09-08 0.3.3 MAL-2025-46977
slice-ansi 374 513M 2025-09-08 7.1.1 MAL-2025-46979
error-ex 442 453M 2025-09-08 1.3.3 MAL-2025-46975
axios 370 518M 2026-03-31 0.30.4, 1.14.1 MAL-2026-2307
react-hook-form 907 258M 2026-04-18 7.73.0 MAL-2026-2853
keyv 186 747M 2026-08-04 6.0.0 MAL-2026-11524
flat-cache 192 733M 2026-08-04 6.1.24 MAL-2026-11971
file-entry-cache 213 702M 2026-08-04 11.1.6 MAL-2026-11970

Download rank and monthly downloads from ecosyste.ms, retrieved 13 October 2026. Each record lists only the malicious versions; other versions of these packages are not affected.

12 of the 19 come from a single day, 8 September 2025, when one maintainer’s account was phished. The keyv case shows why build provenance alone does not settle trust: the record states that the poisoned versions carried a valid, signed provenance attestation, because attackers pushed code to the source repository and let the normal release workflow publish it.

Typosquats are a small share

To test the typosquatting story, we compared each package name to the top 1,000 npm names. A name counts as a lookalike if it is one edit away from a popular name of four or more characters, or two edits away from one of seven or more characters. Exact matches (the hijacks above) are excluded.

Only 332 of 81,430 non-token-farming names pass (0.4%): 96 at one edit and 236 at two. None of the 140,728 token-farming names do (0 matches). The most imitated targets are express (19 lookalikes), commander (13), and lodash (10).

Two other naming signals are larger. 19.3% of non-token-farming records are scoped names like @org/package (7.7% of all records). And of the 24,096 non-token-farming records that list explicit versions, 3,838 (15.9%) include a major version of 90 or higher, a pattern used to win version resolution in dependency confusion.

Imitated package Rank Lookalikes Examples
express 263 19 boxpress, dxpress, ekspress, epress, epxress
commander 7 13 cmmande, cmomander, comamnder, comander, commandef
lodash 183 10 fodash, iodash, ldash, lodah, lodashh
bluebird 871 8 blbird, blubird, bluebidr, bluebin, blueibrd
chalk 14 8 calk, chalc, chalk2, chalkk, chalq
react 146 8 eact, r2act, reaact, reacct, reat
async 414 7 aasync, asinc, asnc, asymc, asynd
typescript 51 7 m-typescript, o-typescript, typecript, typescri, typescript3
fdir 119 6 fdig, fdir1, fdir2, fdir3, fdir4
react-dom 172 5 eract-dom, react-dmo, react-odm, reat-com, rect-do
fs-extra 84 5 fs-etxra, fs-exrta, fs-extar, fs-xetra, fsextrra
jsonwebtoken 869 5 jsnwebtokn, jsonwebjstoken, jsonwedjoken, jsonwepjoken, jsonweqjoken

Who reports malicious npm packages

Amazon Inspector is credited on 88% of all npm records. With token farming removed, the field is wider:

Credited finder Records excl. token farming Share All npm records
Amazon Inspector 54,996 67.5% 195,724
ReversingLabs 10,023 12.3% 10,024
OpenSSF: Package Analysis 5,287 6.5% 5,288
SafeDep 1,454 1.8% 1,454
Aikido Security 444 0.5% 444
Socket Threat Research Team 444 0.5% 444
GitHax: Software Supply Chain Threat Intelligence 194 0.2% 194
Checkmarx 142 0.2% 142
OX Security 103 0.1% 103
Stacklok: trustypkg.dev 65 0.1% 65

A record can credit more than one finder, so shares can sum past 100%. 15,483 non-token-farming records credit no finder; 15,438 of them list GitHub’s malware advisory feed (ghsa-malware) as a source.

This concentration matters for anyone reading trend lines. A new detection rule from one large contributor can move a month’s total by tens of thousands, as August and November 2025 show. The same caution applies when reading the record pace of CVE publication in 2026: a count of reports is not a count of attacks.

What this means for MSPs

  • Do not let installs run code by default. CISA’s April 2026 axios alert recommends ignore-scripts=true in .npmrc. GitHub says Shai-Hulud spread through malicious post-install scripts, and the OpenSSF records say the @antv and keyv waves ran through preinstall hooks.
  • Add a release-age delay. The same alert recommends min-release-age=7 so npm only installs versions at least seven days old. TanStack says its malicious versions were spotted 20 to 26 minutes after publication, and the debug advisory says the bad release was removed the same day, so a short delay would have skipped both.
  • Commit lockfiles and install with npm ci. OpenSSF’s npm guide recommends lockfiles because they pin dependencies by cryptographic hash, and npm ci treats them as read-only. CISA’s Shai-Hulud alert asked teams to check lockfiles for affected versions and pin to releases from before 16 September 2025.
  • Treat provenance as necessary, not sufficient. Provenance proves which pipeline built a package, not that the source was clean. The keyv versions shipped with valid provenance.
  • Claim your scopes and allowlist registries. OpenSSF recommends registering your organization’s scope on the public registry and binding it to your private registry, which blocks dependency confusion.
  • Monitor the feed, not the headlines. The OpenSSF records are free in OSV format; matching client lockfiles against them catches the hijacks that matter. When a wave hits, rotate developer and CI credentials, as CISA advised for both Shai-Hulud and axios. Only 7 of the 222,159 npm records carry a CVE alias, and the CISA Known Exploited Vulnerabilities catalog lists only CVEs, so do not wait for KEV to flag a package compromise.

Frequently asked questions

How many malicious npm packages are there?

The OpenSSF malicious-packages database held 222,159 npm records on 13 October 2026, covering 222,158 unique package names. That is 92.9% of all 239,109 malicious package records across every ecosystem in the database. OSV.dev’s npm export of the same day lists 222,158 active MAL records; the one-record gap is a record published after the export.

Are npm packages safe?

Most reported malicious packages are spam: 63% are tea.xyz token farming. But 19 records name packages in the 1,000 most-downloaded on npm, including chalk, debug, axios, and keyv. Those hijacks, not obscure lookalikes, are where real exposure comes from.

Is there a recent issue with npm?

The latest large wave was the keyv and cacheable worm of 4 August 2026, with 444 OpenSSF records. The database added 855 npm records in September 2026 and 354 from 1 to 13 October.

Are most malicious npm packages typosquats?

No. Only 332 of 81,430 non-token-farming package names (0.4%) sit within one or two character edits of a top-1,000 npm package under our test. None of the 140,728 token-farming names did.

How does npm compare with PyPI for malicious packages?

npm has 222,159 records against 11,798 for PyPI. Even after removing token farming, npm has 81,431, or 6.9 times PyPI.

How do you protect against npm supply chain attacks?

CISA’s 2026 axios alert recommends setting ignore-scripts=true and min-release-age=7 in .npmrc, rotating developer credentials, and phishing-resistant MFA. OpenSSF’s npm guide adds committed lockfiles installed with npm ci and scoped names for private packages.

Download the data. malicious-npm-packages-daily-2021-2026.csv (CSV). Licensed under CC BY 4.0: free to reuse with attribution to The Uptime Report.

Methodology

Source. OpenSSF malicious-packages repository (github.com/ossf/malicious-packages), main branch tarball downloaded 13 October 2026. We parsed every OSV record under osv/malicious/ (239,109 records across 11 ecosystem directories; 356 withdrawn records under osv/withdrawn/ excluded). Ecosystem is the directory name. Dates are the OSV “published” field (UTC).

Cross-check. OSV.dev’s npm export (all.zip, same day) holds 222,489 MAL- records, of which 331 are withdrawn, leaving 222,158. Our OpenSSF count is 222,159; the one-record difference is a record published after the OSV export.

Definitions. Token farming: summary or details text contains “tea.xyz” or “tea protocol”. Bulk upload: a non-token-farming npm record whose published timestamp is shared by 500 or more others (two timestamps qualify: 2025-08-14T18:52:04Z (34,166), 2025-09-05T17:10:25Z (4,639)). Individually described: all other npm records. Finder: names in each record’s “credits” field. Lookalike: Levenshtein distance 1 to a top-1,000 name of 4+ characters, or 2 to a name of 7+ characters, exact matches excluded, full package names compared. Top 1,000: ecosyste.ms npm registry packages sorted by last-month downloads, retrieved 13 October 2026. Hijacked top package: record name exactly equals a top-1,000 name.

Limitations. The database counts reports, not attacks, and reporting effort varies by contributor and over time. Published dates show when a record entered the database, not when the package appeared on npm. One record covers one package; a wave’s record count can differ from the package or version counts vendors publish. Text matching depends on what contributors wrote: some records carry only generic text. The lookalike test catches character-level typos, not combination names like “express-helper”.

Not advice. This is an analysis of public data, not a security assessment of any package or environment.

Cite as:The Uptime Report. "Malicious npm Packages: 63% of 222,159 Reports Were One Token-Farming Flood, While Worms Hit the Top 1,000." October 2026. https://theuptimereport.com/malicious-npm-packages-statistics/

References

  1. OpenSSF, malicious-packages repository (OSV records). Accessed October 2026.
  2. OSV.dev, npm vulnerability export (all.zip). Accessed October 2026.
  3. ecosyste.ms, npm registry packages sorted by downloads. Accessed October 2026.
  4. AWS Security Blog, “Amazon Inspector detects over 150,000 malicious packages linked to token farming campaign,” 13 November 2025. Accessed October 2026.
  5. CISA, “Widespread Supply Chain Compromise Impacting npm Ecosystem,” 23 September 2025. Accessed October 2026.
  6. GitHub Blog, “Our plan for a more secure npm supply chain,” 22 September 2025. Accessed October 2026.
  7. debug-js/debug, security advisory GHSA-4×49-vf9v-38px. Accessed October 2026.
  8. chalk/chalk, issue #656, “Version 5.6.1 published to npm is compromised”. Accessed October 2026.
  9. GitHub Advisory Database, GHSA-hxq5-5w35-rmpp (Malware in @zapier/zapier-sdk). Accessed October 2026.
  10. CISA, “Supply Chain Compromise Impacts Axios Node Package Manager,” 20 April 2026. Accessed October 2026.
  11. GitHub Advisory Database, GHSA-fw8c-xr5c-95f9 (axios). Accessed October 2026.
  12. TanStack, npm supply chain compromise postmortem, 11 May 2026. Accessed October 2026.
  13. GitHub Advisory Database, GHSA-hqrw-phww-294v (@antv/g2). Accessed October 2026.
  14. GitHub Advisory Database, GHSA-3p9h-f68w-m6fx (Malware in keyv). Accessed October 2026.
  15. OSV.dev, MAL-2026-11524 (keyv 6.0.0). Accessed October 2026.
  16. OpenSSF, npm Best Practices Guide. Accessed October 2026.
  17. GitHub Advisory Database, malware advisories. Accessed October 2026.

Research library

More original data reports from The Uptime Report. Every report includes its methodology and a free CSV download. Browse all research

Threats and breaches

Infrastructure and uptime

Regulation and disclosure

Workforce and pay

MSP market and spending

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *