npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms aliyundrive@6.0.3 as malicious (MAL-2024-1745): Malicious code in aliyundrive (npm)

OpenSSF Malicious Packages via OSV confirms @mrlegendbot/baileys@1.2.5 as malicious (MAL-2026-15819): Malicious code in @mrlegendbot/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @mrlegendbot/baileys@1.2.4 as malicious (MAL-2026-15819): Malicious code in @mrlegendbot/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @systemzero/baileys@1.1.2 as malicious (MAL-2026-15820): Malicious code in @systemzero/baileys (npm)

OpenSSF Malicious Packages via OSV confirms peertube-plugin-poc-marker@1.0.0 as malicious (MAL-2026-15817): Malicious code in peertube-plugin-poc-marker (npm)

OpenSSF Malicious Packages via OSV confirms evilpostinstall@0.3.0 as malicious (MAL-2026-15625): Malicious code in evilpostinstall (npm)

OpenSSF Malicious Packages via OSV confirms selfsigned-certificate@1.1.0 as malicious (MAL-2026-15623): Malicious code in selfsigned-certificate (npm)

OpenSSF Malicious Packages via OSV confirms eslint-rxjs@1.0.1 as malicious (MAL-2026-15812): Malicious code in eslint-rxjs (npm)

OpenSSF Malicious Packages via OSV confirms quartz-core@99.1.9 as malicious (MAL-2026-15671): Malicious code in quartz-core (npm)

The package contains a concrete, automatic destructive install hook targeting consumer dependencies. This warrants blocking regardless of otherwise ordinary runtime library code.

Automatic installation performs destructive and broad consumer-project changes, including AI-agent instruction files. This meets the install-hook abuse blocking policy despite no observed...

The automatic postinstall hook mutates foreign consumer application files and root-level AI-agent instruction files. This meets the policy for malicious install-hook abuse despite no obse...

This is a concrete install-hook supply-chain risk: mutable remote executable content and unpinned user-wide Python packages are installed automatically. No credential theft was found, but...

The package uses postinstall to persist an evaluated command in multiple user shell configuration files. This automatic mutation of shell control files is a concrete install-hook abuse de...

The automatic lifecycle hook persists a new CI workflow in consumer repositories and causes future network reporting to an external registry. This is unconsented install-time project muta...

The automatic postinstall executes unpinned remote code and uses it to register hooks in a foreign AI-agent environment. This is concrete install-hook abuse, not merely an explicit user-i...

This is an automatic install-time remote-code-execution chain with deliberate detached execution. The remote payload is opaque to the package snapshot and has Node module access.

The automatic unpinned executable download into the consumer project and its later execution form a concrete install-hook supply-chain attack surface. The visible converter source does no...

The automatic lifecycle hook installs and executes an externally resolved Python package, creating an unconsented remote code-execution supply-chain path. Pinning the version reduces ambi...

This is an unconsented postinstall chain that force-upgrades registered projects and establishes persistent background execution. It meets the policy threshold for malicious install-hook...