Loading npm security reports…
Skip to main contentMalware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:40
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 126
Updated 11 Oct 2026, 19:45 UTC. Ordered by latest scan.
rdeactjs@1.1.4
OpenSSF Malicious Packages via OSV confirms rdeactjs@1.1.4 as malicious (MAL-2026-7357): Malicious code in rdeactjs (npm)
rceactjs@1.1.4
OpenSSF Malicious Packages via OSV confirms rceactjs@1.1.4 as malicious (MAL-2026-7356): Malicious code in rceactjs (npm)
rbeactjs@1.1.4
OpenSSF Malicious Packages via OSV confirms rbeactjs@1.1.4 as malicious (MAL-2026-7355): Malicious code in rbeactjs (npm)
raeactjs@1.1.4
OpenSSF Malicious Packages via OSV confirms raeactjs@1.1.4 as malicious (MAL-2026-7354): Malicious code in raeactjs (npm)
oreactjs@1.1.4
OpenSSF Malicious Packages via OSV confirms oreactjs@1.1.4 as malicious (MAL-2026-7333): Malicious code in oreactjs (npm)