Auto-synchronize malicious packages

DataDog · ikretz · Feb 27, 2025 · Feb 27, 2025 · Feb 27, 2025 · Feb 27, 2025
commit 8be5c70ec78f2e7a2708c8dae73bec4df4b45ee1
diff --git a/README.md b/README.md
@@ -4,7 +4,7 @@
   <img src="./image.png" height="400" />
 </p>
 
-This repository is an **open-source dataset of <span id="num-samples">4855</span> malicious software packages** (and counting) identified by Datadog, as part of our security research efforts in software supply-chain security. Most of the malicious packages have been identified by [GuardDog](https://github.com/DataDog/guarddog).
+This repository is an **open-source dataset of <span id="num-samples">4900</span> malicious software packages** (and counting) identified by Datadog, as part of our security research efforts in software supply-chain security. Most of the malicious packages have been identified by [GuardDog](https://github.com/DataDog/guarddog).
 
 Current ecosystems:
 - PyPI

diff --git a/...les/npm/angular-remove-diacritics/99.9.9/2025-02-24-angular-remove-diacritics-v99.9.9.zip b/...les/npm/angular-remove-diacritics/99.9.9/2025-02-24-angular-remove-diacritics-v99.9.9.zip
diff --git a/...s/npm/angular-remove-diacritics/999.9.9/2025-02-25-angular-remove-diacritics-v999.9.9.zip b/...s/npm/angular-remove-diacritics/999.9.9/2025-02-25-angular-remove-diacritics-v999.9.9.zip
diff --git a/...se-labs-react-native-example/1.0.2/2025-02-25-arkose-labs-react-native-example-v1.0.2.zip b/...se-labs-react-native-example/1.0.2/2025-02-25-arkose-labs-react-native-example-v1.0.2.zip
diff --git a/samples/npm/bsbexample/1.1.2/2025-02-25-bsbexample-v1.1.2.zip b/samples/npm/bsbexample/1.1.2/2025-02-25-bsbexample-v1.1.2.zip
diff --git a/samples/npm/codebarrel/99.9.9/2025-02-24-codebarrel-v99.9.9.zip b/samples/npm/codebarrel/99.9.9/2025-02-24-codebarrel-v99.9.9.zip
diff --git a/samples/npm/codebarrel/999.9.9/2025-02-25-codebarrel-v999.9.9.zip b/samples/npm/codebarrel/999.9.9/2025-02-25-codebarrel-v999.9.9.zip
diff --git a/samples/npm/console-node-ts/99.99.1/2025-02-25-console-node-ts-v99.99.1.zip b/samples/npm/console-node-ts/99.99.1/2025-02-25-console-node-ts-v99.99.1.zip
diff --git a/...npm/cryptocom-ai-agent-service/99.99.1/2025-02-25-cryptocom-ai-agent-service-v99.99.1.zip b/...npm/cryptocom-ai-agent-service/99.99.1/2025-02-25-cryptocom-ai-agent-service-v99.99.1.zip
diff --git a/samples/npm/dependencyconfusion9/1.0.0/2025-02-26-dependencyconfusion9-v1.0.0.zip b/samples/npm/dependencyconfusion9/1.0.0/2025-02-26-dependencyconfusion9-v1.0.0.zip
diff --git a/samples/npm/eslint-plugin-highcharts/2.0.0/2025-02-26-eslint-plugin-highcharts-v2.0.0.zip b/samples/npm/eslint-plugin-highcharts/2.0.0/2025-02-26-eslint-plugin-highcharts-v2.0.0.zip
diff --git a/...ib-backend-commons-node/1.0.0/2025-02-26-focc-commons-lib-backend-commons-node-v1.0.0.zip b/...ib-backend-commons-node/1.0.0/2025-02-26-focc-commons-lib-backend-commons-node-v1.0.0.zip
diff --git a/samples/npm/grpc-js-repository/1.2.1/2025-02-25-grpc-js-repository-v1.2.1.zip b/samples/npm/grpc-js-repository/1.2.1/2025-02-25-grpc-js-repository-v1.2.1.zip
diff --git a/samples/npm/manifest.json b/samples/npm/manifest.json
@@ -878,6 +878,10 @@
     "angular-blockchain-wallet": [
         "1.0.0"
     ],
+    "angular-remove-diacritics": [
+        "99.9.9",
+        "999.9.9"
+    ],
     "another-query-parser": [
         "8.3.5"
     ],
@@ -1012,6 +1016,9 @@
         "1.0.0",
         "2.0.0"
     ],
+    "arkose-labs-react-native-example": [
+        "1.0.2"
+    ],
     "arkoselabs": [
         "99.9.9"
     ],
@@ -1376,6 +1383,9 @@
     "bs58lite": [
         "2.3.2"
     ],
+    "bsbexample": [
+        "1.1.2"
+    ],
     "bug-bounttest": [
         "1.0.0"
     ],
@@ -1695,6 +1705,10 @@
     "code-analysis-ts-for-sellercenter": [
         "5.3.5"
     ],
+    "codebarrel": [
+        "99.9.9",
+        "999.9.9"
+    ],
     "codeql-extractor-iac-action": [
         "6.0.1"
     ],
@@ -1841,6 +1855,9 @@
     "configure-pages": [
         "4.3.0"
     ],
+    "console-node-ts": [
+        "99.99.1"
+    ],
     "console-webapp-static-server": [
         "1.0.0"
     ],
@@ -1894,6 +1911,9 @@
     "crypto-buddies": [
         "9.9.9"
     ],
+    "cryptocom-ai-agent-service": [
+        "99.99.1"
+    ],
     "cs-base-component": [
         "7.2.3"
     ],
@@ -2012,6 +2032,9 @@
     "dependency-review-action": [
         "2.0.9"
     ],
+    "dependencyconfusion9": [
+        "1.0.0"
+    ],
     "deploy-pages": [
         "4.3.0"
     ],
@@ -2442,6 +2465,9 @@
         "7.1.9",
         "7.3.9"
     ],
+    "eslint-plugin-highcharts": [
+        "2.0.0"
+    ],
     "eslint-plugin-internal-playwright": [
         "6.5.8"
     ],
@@ -2830,6 +2856,9 @@
         "9.9.13",
         "9.9.14"
     ],
+    "focc-commons-lib-backend-commons-node": [
+        "1.0.0"
+    ],
     "fontcharacter": [
         "9.9.9"
     ],
@@ -3051,6 +3080,9 @@
     "growthbook-app": [
         "9.9.9"
     ],
+    "grpc-js-repository": [
+        "1.2.1"
+    ],
     "grpclb-zk": [
         "6.5.8"
     ],
@@ -4036,7 +4068,14 @@
         "1.2.7",
         "1.2.8",
         "1.2.9",
-        "1.3.1"
+        "1.3.1",
+        "1.3.2",
+        "1.3.4",
+        "1.3.6",
+        "1.3.7",
+        "1.3.8",
+        "1.4.0",
+        "1.4.1"
     ],
     "mygcpconfusedfunctionpocmaliciouspackage": [
         "1.0.1",
@@ -4066,6 +4105,9 @@
     "ne-captcha": [
         "99.11.18"
     ],
+    "needlecast_prodeng_bfg_ui_consumerclient": [
+        "1.0.0"
+    ],
     "nerd4node": [
         "8.2.3"
     ],
@@ -4667,11 +4709,17 @@
     "pornhub": [
         "9.9.9"
     ],
+    "post-comment": [
+        "2.0.2"
+    ],
     "postcss-optimizer": [
         "3.2.2",
         "3.2.4",
         "3.2.5"
     ],
+    "postprocesstree-addon": [
+        "1.1.2"
+    ],
     "powerupdate": [
         "1.0.0"
     ],
@@ -5240,6 +5288,9 @@
     "safe-react-components": [
         "1.1.0"
     ],
+    "safe-settings": [
+        "99.99.1"
+    ],
     "safebs58.js": [
         "2.3.2"
     ],
@@ -5347,6 +5398,10 @@
     "scm-retail-ui": [
         "6.5.8"
     ],
+    "scriptconfig": [
+        "1.0.0",
+        "1.0.1"
+    ],
     "sddst-ui": [
         "1.0.0"
     ],
@@ -5383,6 +5438,9 @@
     "security-alert-watcher": [
         "0.0.1"
     ],
+    "segment-anything-mini-demo": [
+        "99.99.1"
+    ],
     "selectkit1": [
         "9.9.9"
     ],
@@ -5509,6 +5567,10 @@
     "serum-dex-ui": [
         "99.9.9"
     ],
+    "serve-static-corell": [
+        "1.0.0",
+        "1.0.1"
+    ],
     "setup-node": [
         "2.0.9"
     ],
@@ -5554,6 +5616,9 @@
     "shopify-ecommerce-shopping-cart": [
         "9.9.9"
     ],
+    "shopmacher-mollie-application": [
+        "2.1.2"
+    ],
     "short-link-sharer": [
         "5.5.10"
     ],
@@ -5602,6 +5667,9 @@
         "1.0.0",
         "5.1.1"
     ],
+    "small-ct": [
+        "2.0.82"
+    ],
     "smart-wallet-permissions": [
         "1.2.0"
     ],
@@ -5709,6 +5777,9 @@
     "spectro-cloud-docs": [
         "1.0.1"
     ],
+    "spectrocoin": [
+        "99.99.1"
+    ],
     "spectrum-css-monorepo": [
         "1.0.0"
     ],
@@ -5819,6 +5890,9 @@
     "stormapp": [
         "1.0.5"
     ],
+    "stormapptest213": [
+        "1.0.0"
+    ],
     "storyblok-rich-text-astro-renderer-workspace": [
         "99.99.1",
         "99.99.99"
@@ -5946,6 +6020,9 @@
     "tbi-editor": [
         "6.1.9"
     ],
+    "team-labeler-action": [
+        "1.2.1"
+    ],
     "team-plain": [
         "1.0.1"
     ],
@@ -6544,6 +6621,9 @@
     "vis-trees": [
         "89.3.5"
     ],
+    "visitor-targeting": [
+        "1.0.0"
+    ],
     "vite-paypal": [
         "10.9.9"
     ],
@@ -6884,6 +6964,9 @@
     "xt-main": [
         "19.4.9"
     ],
+    "yaml-update-action": [
+        "2.14.3"
+    ],
     "yandex-pandora-docs": [
         "1.0.0",
         "1.0.2"

diff --git a/...nfusedfunctionpoctestpackage/1.3.2/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.2.zip b/...nfusedfunctionpoctestpackage/1.3.2/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.2.zip
diff --git a/...nfusedfunctionpoctestpackage/1.3.4/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.4.zip b/...nfusedfunctionpoctestpackage/1.3.4/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.4.zip
diff --git a/...nfusedfunctionpoctestpackage/1.3.6/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.6.zip b/...nfusedfunctionpoctestpackage/1.3.6/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.6.zip
diff --git a/...nfusedfunctionpoctestpackage/1.3.7/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.7.zip b/...nfusedfunctionpoctestpackage/1.3.7/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.7.zip
diff --git a/...nfusedfunctionpoctestpackage/1.3.8/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.8.zip b/...nfusedfunctionpoctestpackage/1.3.8/2025-02-26-myconfusedfunctionpoctestpackage-v1.3.8.zip
diff --git a/...nfusedfunctionpoctestpackage/1.4.0/2025-02-26-myconfusedfunctionpoctestpackage-v1.4.0.zip b/...nfusedfunctionpoctestpackage/1.4.0/2025-02-26-myconfusedfunctionpoctestpackage-v1.4.0.zip
diff --git a/...nfusedfunctionpoctestpackage/1.4.1/2025-02-26-myconfusedfunctionpoctestpackage-v1.4.1.zip b/...nfusedfunctionpoctestpackage/1.4.1/2025-02-26-myconfusedfunctionpoctestpackage-v1.4.1.zip
diff --git a/...fg_ui_consumerclient/1.0.0/2025-02-26-needlecast_prodeng_bfg_ui_consumerclient-v1.0.0.zip b/...fg_ui_consumerclient/1.0.0/2025-02-26-needlecast_prodeng_bfg_ui_consumerclient-v1.0.0.zip
diff --git a/samples/npm/post-comment/2.0.2/2025-02-25-post-comment-v2.0.2.zip b/samples/npm/post-comment/2.0.2/2025-02-25-post-comment-v2.0.2.zip