npm malware reports, with evidence.

The install-time hook executes remote code and changes global tooling and AI-skill state by default. This creates a concrete, unconsented supply-chain execution path.

This is an unconsented postinstall mutation of a foreign AI-agent control surface that deliberately removes a safety reminder. The local API client does not offset the install-time attack...

This package contains a complete automatic install-time chain for secret exfiltration and remote shell access. The behavior is malicious and requires blocking.

This is an automatic install-time credential-harvesting and reverse-shell payload, reinforced by explicit typosquat metadata. It warrants blocking.

This is an automatic install-time credential-exfiltration and reverse-shell chain, not a user-invoked administrative feature. The hard-coded external server and typosquat metadata further...

The package's automatic postinstall makes broad changes to consumer and user AI-agent configuration, then persists a future lifecycle command in the consumer project. This meets the block...

The automatic lifecycle hook performs unpinned remote shell execution and installs an external executable engine, forming a concrete install-time remote-code-execution chain. Version matc...

The package has a concrete automatic install-time mutation of a foreign AI-agent dependency. The source does not show exfiltration, but the unconsented overwrite is sufficient install-hoo...

The package has a concrete automatic postinstall chain that deploys content across broad, foreign AI-agent configuration directories. Its conflict safeguards do not make the automatic cro...

This is a concealed, remotely controlled browser redirect packaged as an npm entry point. The lack of install hooks does not mitigate the delivered phishing or malware-routing behavior.

This is an automatic postinstall mutation of a broad, foreign AI-agent control surface. The package installs event-triggered commands and permissions into global Claude Code configuration...

The package has a concrete automatic postinstall hook that invokes an AI-agent skills synchronization command. This is unconsented install-hook abuse of a foreign control surface.

OpenSSF Malicious Packages via OSV confirms @quantixfinance/token@1.0.0 as malicious (MAL-2026-15854): Malicious code in @quantixfinance/token (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/contracts@1.0.0 as malicious (MAL-2026-15851): Malicious code in @quantixfinance/contracts (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/ui@1.0.0 as malicious (MAL-2026-15856): Malicious code in @quantixfinance/ui (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/tron@1.0.0 as malicious (MAL-2026-15855): Malicious code in @quantixfinance/tron (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/sdk@1.0.0 as malicious (MAL-2026-15852): Malicious code in @quantixfinance/sdk (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/supabase@1.0.0 as malicious (MAL-2026-15853): Malicious code in @quantixfinance/supabase (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/wallet@1.0.0 as malicious (MAL-2026-15857): Malicious code in @quantixfinance/wallet (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/common@1.0.0 as malicious (MAL-2026-15849): Malicious code in @quantixfinance/common (npm)

OpenSSF Malicious Packages via OSV confirms @quantixfinance/config@1.0.0 as malicious (MAL-2026-15850): Malicious code in @quantixfinance/config (npm)