npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-3028 blocks this version. npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils {hostname, whoami, pwd...

OpenSSF/OSV malware advisory MAL-2026-3334 blocks this version. The package fanduel was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-3334 blocks this version. The package fanduel was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-3334 blocks this version. The package fanduel was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-3033 blocks this version. The package tether-base was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-14093 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-2862 blocks this version. The package rtms-manager was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-14082 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14082 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14082 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-3028 blocks this version. npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils {hostname, whoami, pwd...

OpenSSF/OSV malware advisory MAL-2026-3028 blocks this version. npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils {hostname, whoami, pwd...

OpenSSF/OSV malware advisory MAL-2026-14083 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14083 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-14093 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-2862 blocks this version. The package rtms-manager was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-2862 blocks this version. The package rtms-manager was found to contain malicious code.

OpenSSF/OSV malware advisory MAL-2026-14091 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...