Loading npm security reports…
Skip to main contentMalware2026-09-04 07:10Malware2026-09-04 07:10Malware2026-09-04 07:10Malware2026-09-04 07:10
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 105
Updated 11 Oct 2026, 07:31 UTC. Ordered by latest scan.
real-router-telemetry@1.0.4
OpenSSF Malicious Packages via OSV confirms real-router-telemetry@1.0.4 as malicious (MAL-2026-15924): Malicious code in real-router-telemetry (npm)
real-router-telemetry@1.0.1
OpenSSF Malicious Packages via OSV confirms real-router-telemetry@1.0.1 as malicious (MAL-2026-15924): Malicious code in real-router-telemetry (npm)
line-through@1.0.0
OpenSSF Malicious Packages via OSV confirms line-through@1.0.0 as malicious (MAL-2026-15923): Malicious code in line-through (npm)
@yane88/workbuddy-02@1.0.3
OpenSSF Malicious Packages via OSV confirms @yane88/workbuddy-02@1.0.3 as malicious (MAL-2026-15666): Malicious code in @yane88/workbuddy-02 (npm)
randomunblockedwebsite
