Loading npm security reports…
Skip to main contentMalware6 days ago 05:35Malware6 days ago 05:35Malware6 days ago 05:35Malware6 days ago 05:35
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 11
Updated 8 Oct 2026, 15:20 UTC. Ordered by latest scan.
wailib@1.0.0
OpenSSF Malicious Packages via OSV confirms wailib@1.0.0 as malicious (MAL-2026-17451): Malicious code in wailib (npm)
@developmentyora/baileyss@1.0.0
OpenSSF Malicious Packages via OSV confirms @developmentyora/baileyss@1.0.0 as malicious (MAL-2026-17439): Malicious code in @developmentyora/baileyss (npm)
danz-bails@1.1.0
OpenSSF Malicious Packages via OSV confirms danz-bails@1.1.0 as malicious (MAL-2026-17444): Malicious code in danz-bails (npm)
danz-bails@1.0.0
OpenSSF Malicious Packages via OSV confirms danz-bails@1.0.0 as malicious (MAL-2026-17444): Malicious code in danz-bails (npm)
kartykgithub-ph-b