Encyclopedia
npm◆ MEDIUMtyposquat⚠ ACTIVE THREAT

ffmepg

First seen: Sep 28, 2026 0 viewsMimics: ffmpeg
Share threatHN
Threat Description

A typosquat of the ffmpeg package name from the August 2017 npm typosquat campaign (transposed 'm' and 'e'). It impersonated the widely used multimedia framework to lure developers into installing the campaign's data-collection payload.

AI Hallucination Analysis
Unlikely AI Hallucination0%
Known to be hallucinated by: None - this is a real typosquat, not an AI hallucination.
Remediation Guide
  1. Remove ffmepg and install the legitimate ffmpeg or fluent-ffmpeg. 2. Rotate npm tokens exposed during the window. 3. Audit for typosquatted names. 4. Pin dependencies by hash.
View on registry
Quick Facts
Ecosystem
npm
Risk Level
MEDIUM
Type
typosquat
Status
ACTIVE
Legitimate Package
ffmpeg
Hallucination Confidence
0%
Check My Project
Scan for this package