npm malware reports, with evidence.

This is an automatic, unverified remote payload execution chain during npm installation. Platform filtering does not constrain the code supplied by the latest release or redirect target.

The automatic postinstall hook mutates a foreign global AI-agent toolchain and persistent user configuration. This is concrete unconsented install-time control-surface mutation, so it mee...

This is unconsented install-time mutation of SSH credentials, local SSH configuration, remote authorized keys, system packages, and background processes. The behavior is concrete and reac...

This is an automatic lifecycle chain that executes a remotely obtained opaque binary and broadly installs AI-agent skills. The embedded hash does not make the unreviewable, unconsented ag...

This is an unverified, mutable remote-binary execution chain in a postinstall hook, with an environment-controlled source and quarantine removal. That is concrete install-hook abuse rathe...

The automatic postinstall chain mutates foreign AI-agent control surfaces and establishes login persistence. This is concrete install-hook abuse under the launcher isolation policy.

The package performs a concrete destructive action automatically at install time against consumer dependencies. This establishes malicious install-hook abuse regardless of the otherwise o...

This is a concrete automatic postinstall mutation of broad, foreign AI-agent control surfaces. The guarded scope and lack of observed exfiltration do not remove the unconsented persistent...

This is an unconsented install-time chain that fetches and executes opaque remote code and automatically modifies a broad AI-agent control surface. Hash verification does not make the aut...

The package disguises a large obfuscated command-and-network payload behind an inert middleware export and loads it at import time. Although there is no install hook, the reachable runtim...

The package's automatic postinstall makes privileged host-level software changes and its runtime path repeats the behavior. No exfiltration was confirmed, but the unconsented lifecycle mu...

The install hook automatically performs remote SSH key persistence and starts background services. This is concrete unconsented install-time behavior, not merely a user-invoked SSH utility.

The package performs broad, automatic mutations of a consumer project and installs a plugin that continually restores package-controlled source. This concrete install-hook persistence war...

The automatic lifecycle hook stages a mutable, unverified remote executable and alters the user's Python environment. The CLI explicitly executes the staged binary, creating a concrete re...

OpenSSF Malicious Packages via OSV confirms ultra-ws@1.0.0 as malicious (MAL-2026-16155): Malicious code in ultra-ws (npm)

The automatic postinstall hook modifies third-party dependency code and then strips debugging artifacts. That combination is a concrete, opaque install-hook abuse even though no install-t...

The automatic, remotely controlled modification of a user's WhatsApp newsletter subscriptions is concrete malicious behavior. The benign Node-version preinstall check does not mitigate th...

This is an unconsented install-time supply-chain path that fetches mutable remote code and mutates a separate Python environment. It is concrete install-hook abuse, not ordinary package-l...

This is an unconsented install-time mutation of a foreign, user-global AI-agent control surface. Under the stated policy, that concrete behavior requires blocking publication.

The automatic lifecycle hook deploys remote, mutable code and changes a user-level Python environment without artifact verification. This is a concrete install-time supply-chain attack su...

The lifecycle hook performs unverified remote payload retrieval and broad user-environment package installation automatically. These actions create a concrete install-time code-execution...