npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms evilpostinstall@0.7.1 as malicious (MAL-2026-15625): Malicious code in evilpostinstall (npm)

OpenSSF Malicious Packages via OSV confirms evilpostinstall@0.8.0 as malicious (MAL-2026-15625): Malicious code in evilpostinstall (npm)

OpenSSF Malicious Packages via OSV confirms evilpostinstall@0.7.0 as malicious (MAL-2026-15625): Malicious code in evilpostinstall (npm)

OpenSSF Malicious Packages via OSV confirms evilpostinstall@0.9.1 as malicious (MAL-2026-15625): Malicious code in evilpostinstall (npm)

OpenSSF Malicious Packages via OSV confirms aliyundrive@6.0.4 as malicious (MAL-2024-1745): Malicious code in aliyundrive (npm)

OpenSSF Malicious Packages via OSV confirms aliyundrive@6.0.3 as malicious (MAL-2024-1745): Malicious code in aliyundrive (npm)

OpenSSF Malicious Packages via OSV confirms @mrlegendbot/baileys@1.2.5 as malicious (MAL-2026-15819): Malicious code in @mrlegendbot/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @mrlegendbot/baileys@1.2.4 as malicious (MAL-2026-15819): Malicious code in @mrlegendbot/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @systemzero/baileys@1.1.2 as malicious (MAL-2026-15820): Malicious code in @systemzero/baileys (npm)

OpenSSF Malicious Packages via OSV confirms peertube-plugin-poc-marker@1.0.0 as malicious (MAL-2026-15817): Malicious code in peertube-plugin-poc-marker (npm)

OpenSSF Malicious Packages via OSV confirms evilpostinstall@0.3.0 as malicious (MAL-2026-15625): Malicious code in evilpostinstall (npm)

OpenSSF Malicious Packages via OSV confirms selfsigned-certificate@1.1.0 as malicious (MAL-2026-15623): Malicious code in selfsigned-certificate (npm)

OpenSSF Malicious Packages via OSV confirms eslint-rxjs@1.0.1 as malicious (MAL-2026-15812): Malicious code in eslint-rxjs (npm)

OpenSSF Malicious Packages via OSV confirms quartz-core@99.1.9 as malicious (MAL-2026-15671): Malicious code in quartz-core (npm)

The package contains a concrete, automatic destructive install hook targeting consumer dependencies. This warrants blocking regardless of otherwise ordinary runtime library code.

Automatic installation performs destructive and broad consumer-project changes, including AI-agent instruction files. This meets the install-hook abuse blocking policy despite no observed...

The automatic postinstall hook mutates foreign consumer application files and root-level AI-agent instruction files. This meets the policy for malicious install-hook abuse despite no obse...

This is a concrete install-hook supply-chain risk: mutable remote executable content and unpinned user-wide Python packages are installed automatically. No credential theft was found, but...

The package uses postinstall to persist an evaluated command in multiple user shell configuration files. This automatic mutation of shell control files is a concrete install-hook abuse de...

The automatic lifecycle hook persists a new CI workflow in consumer repositories and causes future network reporting to an external registry. This is unconsented install-time project muta...