Loading npm security reports…
Skip to main contentMalware2026-08-28 19:50Malware2026-08-28 19:50Malware2026-08-28 19:50Malware2026-08-28 19:50
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 117
Updated 11 Oct 2026, 15:08 UTC. Ordered by latest scan.
3layerdipstackn9ng1d@0.1.4
OpenSSF Malicious Packages via OSV confirms 3layerdipstackn9ng1d@0.1.4 as malicious (MAL-2026-14842): Malicious code in 3layerdipstackn9ng1d (npm)
3layerdipstackqcvl6h@0.1.4
OpenSSF Malicious Packages via OSV confirms 3layerdipstackqcvl6h@0.1.4 as malicious (MAL-2026-14889): Malicious code in 3layerdipstackqcvl6h (npm)
3layerdipstackvcdkrp@0.1.4
OpenSSF Malicious Packages via OSV confirms 3layerdipstackvcdkrp@0.1.4 as malicious (MAL-2026-14958): Malicious code in 3layerdipstackvcdkrp (npm)
3layerdipstackt3wr5f@0.1.4
OpenSSF Malicious Packages via OSV confirms 3layerdipstackt3wr5f@0.1.4 as malicious (MAL-2026-14925): Malicious code in 3layerdipstackt3wr5f (npm)
3layerdipstackvld3fr