Loading npm security reports…
Skip to main contentMalware2026-09-04 06:55Malware2026-09-04 06:55Malware2026-09-04 06:55Malware2026-09-04 06:55
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 110
Updated 11 Oct 2026, 10:18 UTC. Ordered by latest scan.
dumb-binding-gyp-package@0.1.0
OpenSSF Malicious Packages via OSV confirms dumb-binding-gyp-package@0.1.0 as malicious (MAL-2026-14546): Malicious code in dumb-binding-gyp-package (npm)
kisama-js@0.2.4
OpenSSF Malicious Packages via OSV confirms kisama-js@0.2.4 as malicious (MAL-2026-15645): Malicious code in kisama-js (npm)
kisama-js@0.2.0
OpenSSF Malicious Packages via OSV confirms kisama-js@0.2.0 as malicious (MAL-2026-15645): Malicious code in kisama-js (npm)
kisama-js@0.1.9
OpenSSF Malicious Packages via OSV confirms kisama-js@0.1.9 as malicious (MAL-2026-15645): Malicious code in kisama-js (npm)
kisama-js@0.1.8
OpenSSF Malicious Packages via OSV confirms kisama-js@0.1.8 as malicious (MAL-2026-15645): Malicious code in kisama-js (npm)
