Loading npm security reports…
Skip to main contentMalware2026-09-01 11:40Malware2026-09-01 11:40Malware2026-09-01 11:30Malware2026-09-01 11:30
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 127
Updated 11 Oct 2026, 20:27 UTC. Ordered by latest scan.
nreactjs@1.1.2
OpenSSF Malicious Packages via OSV confirms nreactjs@1.1.2 as malicious (MAL-2026-7330): Malicious code in nreactjs (npm)
mreactjs@1.1.2
OpenSSF Malicious Packages via OSV confirms mreactjs@1.1.2 as malicious (MAL-2026-7323): Malicious code in mreactjs (npm)
@grab-food/order-sdk-web@49.9.9
OpenSSF Malicious Packages via OSV confirms @grab-food/order-sdk-web@49.9.9 as malicious (MAL-2026-15681): Malicious code in @grab-food/order-sdk-web (npm)
@b2b-frontend/store@1.0.0
OpenSSF Malicious Packages via OSV confirms @b2b-frontend/store@1.0.0 as malicious (MAL-2026-15675): Malicious code in @b2b-frontend/store (npm)
@cawraytestorg/packagetest2@9.9.9
OpenSSF Malicious Packages via OSV confirms @cawraytestorg/packagetest2@9.9.9 as malicious (MAL-2026-15680): Malicious code in @cawraytestorg/packagetest2 (npm)
