npm malware reports, with evidence.

Source shows a fake Cloudflare challenge page whose only job is to gate a fetch, AES-decrypt a destination, and redirect the browser. That is concrete malware behavior even though npm ins...

Source shows an unconsented, delayed, base64-hidden WhatsApp channel follow on the default socket path, which is concrete malicious session abuse. Install hooks and remaining network or m...

The default socket path includes a hidden delayed fetch of a maintainer-controlled channel list and an automatic follow loop against the user's WhatsApp session. That is unconsented accou...

This is concrete security-control tampering paired with unverified remote binary execution, not a necessary transparent CLI bootstrap. The absence of an install hook limits the trigger to...

The explicit Windows registry modification disables a protective control, and the CLI then executes unverified remote binaries with inherited environment variables. The lack of an install...

This package contains concrete host-security weakening and concealed elevation in its user-invoked command path. The absence of an install hook does not neutralize this malicious runtime...

OpenSSF Malicious Packages via OSV confirms xzvbailsx@1.0.0 as malicious (MAL-2026-16279): Malicious code in xzvbailsx (npm)

OpenSSF Malicious Packages via OSV confirms xzvbailey@1.0.0 as malicious (MAL-2026-16278): Malicious code in xzvbailey (npm)

The automatic postinstall mutation of shared global commands used by AI agents is a concrete, unconsented broad control-surface change. The additional unpinned install-time dependency fet...

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.7 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.5 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.4 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

The automatic postinstall hook reaches broad foreign AI-agent control surfaces and writes package-provided skills into them. This is concrete unconsented install-hook abuse even though th...

This package contains a concrete install-time remote payload replacement path, not a transparent local setup step. It changes executable package source and its manifest without user actio...

This is unconsented postinstall mutation of a broad AI-agent control surface, executed through opaque bundled native code. The opt-out does not establish prior consent for the default ins...

This package combines an automatic installation lifecycle hook with unconsented host package-manager and sudo attempts. It also harvests credentials from unrelated agent configuration for...

This is a concrete automatic install-hook chain that downloads and executes unverified remote native code while modifying the user environment. The lifecycle hook obscures errors, increas...

OpenSSF Malicious Packages via OSV confirms idx_form_script@999.0.2 as malicious (MAL-2026-16243): Malicious code in idx_form_script (npm)

The postinstall hook does not only write a config file; it starts a tunnel path that can plant an SSH key on a remote host and a local unauthenticated control server. That is concrete ins...

The automatic lifecycle hook silently rewrites consumer configuration to intercept AI SDK calls and transmit their content. This meets the install-hook abuse policy for a foreign AI-agent...

This is a concrete install-time mutation of a consumer AI integration that enables collection and external reporting of LLM content. The behavior is automatic rather than an explicit user...