Loading npm security reports…
Skip to main contentMalware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 123
Updated 11 Oct 2026, 18:09 UTC. Ordered by latest scan.
notepad-frontend@99.99.99
OpenSSF Malicious Packages via OSV confirms notepad-frontend@99.99.99 as malicious (MAL-2026-7328): Malicious code in notepad-frontend (npm)
notepad-monorepo@99.99.99
OpenSSF Malicious Packages via OSV confirms notepad-monorepo@99.99.99 as malicious (MAL-2026-7329): Malicious code in notepad-monorepo (npm)
mx-frontend@99.9.9
OpenSSF Malicious Packages via OSV confirms mx-frontend@99.9.9 as malicious (MAL-2026-7325): Malicious code in mx-frontend (npm)
jsontoken-extend@1.0.9
OpenSSF Malicious Packages via OSV confirms jsontoken-extend@1.0.9 as malicious (MAL-2026-4592): Malicious code in jsontoken-extend (npm)
jsonfb@1.0.3
OpenSSF Malicious Packages via OSV confirms jsonfb@1.0.3 as malicious (MAL-2026-10437): Malicious code in jsonfb (npm)