npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-2498 blocks this version. Multiple evidences indicate malicious behaviors: data exfiltration, sensitive file access, obfuscated code, and suspicious...

OpenSSF/OSV malware advisory MAL-2026-2523 blocks this version. Package is malware. Hardcoded Telegram credentials, data exfiltration, and preinstall script execution indicate malicious i...

OpenSSF/OSV malware advisory MAL-2026-2523 blocks this version. Package is malware. Hardcoded Telegram credentials, data exfiltration, and preinstall script execution indicate malicious i...

OpenSSF/OSV malware advisory MAL-2026-2524 blocks this version. Malicious package due to suspicious callback URL, hostname exfiltration, preinstall script execution, and only one publishe...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14077 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14078 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14078 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14078 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14078 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14078 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14079 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14079 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14079 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2025-192155 blocks this version. The package elf-stats-sparkly-cushion-340 was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2025-47119 blocks this version. The package communicates with a domain associated with malicious activity.