Loading npm security reports…
Skip to main contentMalware1 hour agoMalware1 hour agoMalware1 hour agoMalware1 hour ago
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 2
Updated 8 Oct 2026, 08:48 UTC. Ordered by latest scan.
link-status-page@0.0.42
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.42 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.40
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.40 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.38
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.38 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.2
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.2 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.1
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.1 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
