npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-13366 blocks this version. package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during `npm install`. The README describes...

OpenSSF/OSV malware advisory MAL-2026-13366 blocks this version. package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during `npm install`. The README describes...

OpenSSF/OSV malware advisory MAL-2026-13366 blocks this version. package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during `npm install`. The README describes...

OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...