Every compromised npm package we track

4,521 packages on the npm registry, drawn from 165 tracked incidents. Each page lists the exact versions named by the source advisory and what to do if you installed one.