Malicious packages, on record.

The package performs concrete, unconsented postinstall mutation of the consuming project's dependency manifest through a detached delayed process. No exfiltration was found, but the insta...

Direct inspection confirms concrete install-time persistence, remote shell capability, host reconnaissance, and internal credential/service probing. This is malicious behavior unrelated t...

The package embeds deliberate, unconsented terminal takeover in postinstall, including a detached follow-up process. Although no exfiltration was found, this concrete install-time behavio...

The package is a concealed remote redirect loader disguised as a security-verification page. Although it has no npm lifecycle hook, its shipped runtime behavior is concrete and malicious.

The package contains no usable library code; its only executable artifact is an obfuscated, server-directed redirector hidden behind a Cloudflare-style challenge. No install hook is neede...

This is concrete concealed browser redirection behavior, not a package-aligned web component. No npm lifecycle hook is required because the declared main artifact is the malicious HTML page.

This is concrete, automatic runtime account manipulation and telemetry rather than a package-aligned messaging feature invoked by the user. The benign preinstall check does not mitigate t...

Source establishes a concrete stealth, persistence, capture, and remote-submission chain aimed at defeating proctoring. The inert cookie extractor further reinforces malicious intent, tho...

This is a concrete stealth, persistence, capture, and external-submission chain, not a diagnostic utility. The benign postinstall hook does not mitigate the malicious user-executed behavior.

OpenSSF Malicious Packages via OSV confirms depcruise-fmt@99.9.1 as malicious (MAL-2026-14054): Malicious code in depcruise-fmt (npm)

OpenSSF Malicious Packages via OSV confirms depcruise-wrap-stream-in-html@99.9.1 as malicious (MAL-2026-14068): Malicious code in depcruise-wrap-stream-in-html (npm)

OpenSSF Malicious Packages via OSV confirms depcruise-baseline@99.9.1 as malicious (MAL-2026-14053): Malicious code in depcruise-baseline (npm)

This is concrete unconsented account manipulation on the package's normal runtime path, controlled by a remote payload list. The lifecycle script itself is benign but does not mitigate th...

This is concrete, automatic install-time host compromise behavior, not an inert installer primitive. The lack of observed exfiltration does not mitigate the concealed privileged remote-ac...

Concrete unconsented postinstall persistence and remote-access changes establish malware behavior. No exfiltration endpoint is needed to substantiate the local administrative backdoor.

OpenSSF Malicious Packages via OSV confirms gunzip-js@99.9.1 as malicious (MAL-2026-14056): Malicious code in gunzip-js (npm)

This is concrete install-time privilege escalation, stealth, and remote-access enablement rather than a legitimate package-aligned installer. The absence of a web endpoint does not mitiga...

This package performs a malicious install-time Windows backdoor chain rather than a package-aligned setup. The absence of outbound JavaScript networking does not reduce the concrete remot...

This is concrete install-time hostile behavior, not merely an administrative installer: it creates concealed privileged remote access and employs impersonation and trace removal. Absence...

The automatic lifecycle chain performs concrete privileged persistence and remote-access-enabling changes, including stealth measures. This is malicious behavior, not a package-aligned in...