Loading npm security reports…
Skip to main contentMalware2026-08-10 12:25Malware2026-08-10 12:25Malware2026-08-10 12:25Malware2026-08-10 12:25
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 216
Updated 14 Oct 2026, 22:49 UTC. Ordered by latest scan.
@magda/semantic-indexer-sdk@6.1.2-pr.3759.1
OpenSSF/OSV malware advisory MAL-2025-47009 blocks this version. @magda/semantic-indexer-sdk ships a minified `dist/index.js` bundle for a Magda semantic-indexer SDK. Static keyword patte...
@magda/semantic-indexer-sdk@6.1.2-pr.3759.0
OpenSSF/OSV malware advisory MAL-2025-47009 blocks this version. @magda/semantic-indexer-sdk ships a minified `dist/index.js` bundle for a Magda semantic-indexer SDK. Static keyword patte...
@magda/semantic-indexer-sdk@6.1.2-alpha.0
OpenSSF/OSV malware advisory MAL-2025-47009 blocks this version. @magda/semantic-indexer-sdk ships a minified `dist/index.js` bundle for a Magda semantic-indexer SDK. Static keyword patte...
@magda/semantic-indexer-sdk@7.0.0-pr.3637.5
OpenSSF/OSV malware advisory MAL-2025-47009 blocks this version. @magda/semantic-indexer-sdk ships a minified `dist/index.js` bundle for a Magda semantic-indexer SDK. Static keyword patte...
