Loading npm security reports…
Skip to main contentMalware2026-09-04 02:05Malware2026-09-04 02:05Malware2026-09-04 02:05Malware2026-09-04 02:05
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 114
Updated 11 Oct 2026, 12:49 UTC. Ordered by latest scan.
bnotify-web-sdk@1.3.2
OpenSSF Malicious Packages via OSV confirms bnotify-web-sdk@1.3.2 as malicious (MAL-2026-14551): Malicious code in bnotify-web-sdk (npm)
bnotify-web-sdk@1.3.1
OpenSSF Malicious Packages via OSV confirms bnotify-web-sdk@1.3.1 as malicious (MAL-2026-14551): Malicious code in bnotify-web-sdk (npm)
abcdefghijklnmopqrstuvwxyz@0.1.4
OpenSSF Malicious Packages via OSV confirms abcdefghijklnmopqrstuvwxyz@0.1.4 as malicious (MAL-2026-14999): Malicious code in abcdefghijklnmopqrstuvwxyz (npm)
bnotify-web-sdk@1.2.12
OpenSSF Malicious Packages via OSV confirms bnotify-web-sdk@1.2.12 as malicious (MAL-2026-14551): Malicious code in bnotify-web-sdk (npm)
bnotify-web-sdk@1.2.11
