Loading npm security reports…
Skip to main contentMalware43 mins agoMalware43 mins agoMalware58 mins agoMalware58 mins ago
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Latest security reports
Updated 8 Oct 2026, 08:08 UTC. Ordered by latest scan.
@redman89405/my-module@1.1.0
OpenSSF Malicious Packages via OSV confirms @redman89405/my-module@1.1.0 as malicious (MAL-2026-17336): Malicious code in @redman89405/my-module (npm)
@redman89405/my-module@1.0.0
OpenSSF Malicious Packages via OSV confirms @redman89405/my-module@1.0.0 as malicious (MAL-2026-17336): Malicious code in @redman89405/my-module (npm)
@cat-gen/material@1.0.2
OpenSSF Malicious Packages via OSV confirms @cat-gen/material@1.0.2 as malicious (MAL-2026-17334): Malicious code in @cat-gen/material (npm)
@cat-gen/material@1.0.1
OpenSSF Malicious Packages via OSV confirms @cat-gen/material@1.0.1 as malicious (MAL-2026-17334): Malicious code in @cat-gen/material (npm)
@cat-gen/material@1.0.0
