npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. Package is a weaponized mass-mail / SMS spam and phi...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...