Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 12 Oct 2026, 04:41 UTC. Ordered by latest scan.
Source inspection confirms a concrete concealed capture-and-AI-solving payload with proctoring evasion and persistence. The benign postinstall hook does not reduce the risk of the explici...
Source inspection confirms a concrete stealth, persistence, capture, and AI-assisted cheating workflow. Its credential-handling code and bundled credential material compound the risk, so...
OpenSSF/OSV malware advisory MAL-2026-14978 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-14923 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-14991 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code