Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 14 Oct 2026, 00:31 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-14109 blocks this version. The package presents itself as a LEB128 encoding utility, but index.js unconditionally requires _perf.js, which on load re...
OpenSSF/OSV malware advisory MAL-2026-14112 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-14112 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-14105 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-14102 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package was found to contain malicious code or c...