npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms easypanel-app@1.0.0 as malicious (MAL-2026-15895): Malicious code in easypanel-app (npm)

OpenSSF Malicious Packages via OSV confirms easypanel-ctl@1.0.0 as malicious (MAL-2026-15898): Malicious code in easypanel-ctl (npm)

OpenSSF Malicious Packages via OSV confirms net-util-y8@1.1788432509.0 as malicious (MAL-2026-15901): Malicious code in net-util-y8 (npm)

OpenSSF Malicious Packages via OSV confirms peertube-plugin-video-views-counter@1.0.2 as malicious (MAL-2026-15902): Malicious code in peertube-plugin-video-views-counter (npm)

OpenSSF Malicious Packages via OSV confirms tiny-folder-tree@0.1.0 as malicious (MAL-2026-15907): Malicious code in tiny-folder-tree (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-container-queries@0.1.1 as malicious (MAL-2026-15903): Malicious code in tailwind-container-queries (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-scrollbar-styles@4.0.3 as malicious (MAL-2026-15904): Malicious code in tailwind-scrollbar-styles (npm)

OpenSSF Malicious Packages via OSV confirms tailwindcss-animate-styles@1.0.9 as malicious (MAL-2026-15906): Malicious code in tailwindcss-animate-styles (npm)

OpenSSF Malicious Packages via OSV confirms cbc97b7a@1.1788016922.0 as malicious (MAL-2026-15878): Malicious code in cbc97b7a (npm)

OpenSSF Malicious Packages via OSV confirms cbc97b7a@1.1788006723.0 as malicious (MAL-2026-15878): Malicious code in cbc97b7a (npm)

OpenSSF Malicious Packages via OSV confirms cbc97b7a@1.1787999998.0 as malicious (MAL-2026-15878): Malicious code in cbc97b7a (npm)

The opaque runtime is not aligned with the minimal package metadata and deliberately hides an AI-message steering path. Although it has no install hook, the concrete user-invoked behavior...

The package is a disguised browser redirect loader rather than a usable npm library. Its obfuscation, remotely supplied encrypted destination, and challenge-gated automatic navigation est...

The automatic lifecycle script both installs an unverified remote executable and writes behavior-bearing configuration into multiple foreign AI-agent directories. This is concrete install...

The package combines automatic postinstall execution, broad consumer AI-agent configuration and hook writes, network-backed plugin installation, and detached postinstall reconciliation. T...

This is an unconsented postinstall mutation of both a broad consumer project and AI-agent control surfaces. The behavior is concrete and automatic, so it meets the install-hook abuse bloc...

OpenSSF Malicious Packages via OSV confirms vitest-cli-dev@10.0.7 as malicious (MAL-2026-15870): Malicious code in vitest-cli-dev (npm)

The package creates an unnecessary, aliased runtime dependency on an older release of itself, producing an opaque nested supply-chain path during installation. This is malicious install-h...

This package has an automatic install-time chain that retrieves and installs an opaque native executable from a fixed endpoint while disabling TLS verification. The launcher executes the...

The source establishes an automatic install-time chain that modifies a consumer project and persists itself by rewriting that project's postinstall script. The presence of an older self d...