Loading npm security reports…
Skip to main contentMalware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 122
Updated 11 Oct 2026, 17:27 UTC. Ordered by latest scan.
nw-demo-utils@1.0.7
OpenSSF Malicious Packages via OSV confirms nw-demo-utils@1.0.7 as malicious (MAL-2026-5511): Malicious code in nw-demo-utils (npm)
nw-demo-utils@1.0.6
OpenSSF Malicious Packages via OSV confirms nw-demo-utils@1.0.6 as malicious (MAL-2026-5511): Malicious code in nw-demo-utils (npm)
nw-demo-utils@1.0.5
OpenSSF Malicious Packages via OSV confirms nw-demo-utils@1.0.5 as malicious (MAL-2026-5511): Malicious code in nw-demo-utils (npm)
manage-subscription-app@1.0.0
OpenSSF Malicious Packages via OSV confirms manage-subscription-app@1.0.0 as malicious (MAL-2026-7317): Malicious code in manage-subscription-app (npm)
nw-demo-utils@1.0.4
OpenSSF Malicious Packages via OSV confirms nw-demo-utils@1.0.4 as malicious (MAL-2026-5511): Malicious code in nw-demo-utils (npm)