Loading npm security reports…
Skip to main contentMalware2026-08-20 22:10Malware2026-08-20 22:10Malware2026-08-20 21:05Malware2026-08-20 21:05
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 163
Updated 12 Oct 2026, 17:03 UTC. Ordered by latest scan.
exam-kit@1.0.1
OpenSSF/OSV malware advisory MAL-2026-14331 blocks this version. On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../p...
exam-kit@1.0.0
OpenSSF/OSV malware advisory MAL-2026-14331 blocks this version. On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../p...
exam-kit@1.0.3
OpenSSF/OSV malware advisory MAL-2026-14331 blocks this version. On any require/import of exam-kit, the main entry runs a top-level await that reads an out-of-package file at../../../../p...
exam-kit@1.0.2
OpenSSF/OSV malware advisory MAL-2026-14331 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. On any require/import of exam-kit, the main entry ru...
