npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-14068 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. depcruise-wrap-stream-in-html@99.9.1 is a hollow pac...

OpenSSF/OSV malware advisory MAL-2026-14053 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. depcruise-baseline@99.9.1 has a name resembling depe...

This is concrete unconsented account manipulation on the package's normal runtime path, controlled by a remote payload list. The lifecycle script itself is benign but does not mitigate th...

This is concrete, automatic install-time host compromise behavior, not an inert installer primitive. The lack of observed exfiltration does not mitigate the concealed privileged remote-ac...

Concrete unconsented postinstall persistence and remote-access changes establish malware behavior. No exfiltration endpoint is needed to substantiate the local administrative backdoor.

OpenSSF/OSV malware advisory MAL-2026-14056 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. gunzip-js@99.9.1 is a near-empty npm package (typosq...

This is concrete install-time privilege escalation, stealth, and remote-access enablement rather than a legitimate package-aligned installer. The absence of a web endpoint does not mitiga...

This package performs a malicious install-time Windows backdoor chain rather than a package-aligned setup. The absence of outbound JavaScript networking does not reduce the concrete remot...

This is concrete install-time hostile behavior, not merely an administrative installer: it creates concealed privileged remote access and employs impersonation and trace removal. Absence...

The automatic lifecycle chain performs concrete privileged persistence and remote-access-enabling changes, including stealth measures. This is malicious behavior, not a package-aligned in...

The lifecycle hook causes these privileged, security-weakening changes without an explicit user command. The absence of observed exfiltration does not mitigate the concrete backdoor-like...

Source inspection confirms an automatically activated, obfuscated browser cryptominer rather than a package-aligned utility. The absence of a consumer install hook does not mitigate runti...

The lifecycle hook is benign, but runtime source establishes concealed, automatic modification of outbound user media with package-controlled newsletter metadata. This is concrete decepti...

OpenSSF/OSV malware advisory MAL-2026-13687 blocks this version. On module load, tokocrytodev instantiates a StealthC2 agent and starts a polling loop that fetches commands from https://b...

OpenSSF/OSV malware advisory MAL-2026-14067 blocks this version. upload-to-gcp@3.2.1 runs a postinstall lifecycle script on npm install that collects host identifiers (os.hostname(), proc...

OpenSSF/OSV malware advisory MAL-2026-14065 blocks this version. Package published under a name impersonating Akamai's sensor_data anti-bot SDK. index.js contains a /*... */ comment whose...

OpenSSF/OSV malware advisory MAL-2026-14066 blocks this version. The package advertises itself as an Akamai Bot Manager sensor generator, but its main entry conceals its real behavior. in...

OpenSSF/OSV malware advisory MAL-2026-12337 blocks this version. The package presents itself as an Akamai sensor generator but ships two coupled malicious mechanisms. index.js contains a...

OpenSSF/OSV malware advisory MAL-2026-12331 blocks this version. The package advertises itself as a tiny ID generator but its main entry dist/index.cjs contains an obfuscator.io + RC4 str...

OpenSSF/OSV malware advisory MAL-2026-14052 blocks this version. The package's preinstall.js reads a hex-encoded command string from preinstall.json, decodes it with Buffer.from(hex, 'hex...