npm malware reports, with evidence.

The benign-looking date API is a wrapper around intentional import-time execution of a bundled backdoor binary. No install hook is needed because ordinary application imports activate it.

Source inspection confirms intentional, concealed build-output injection and remote-triggered page replacement. This is concrete malicious behavior against consumers of the package.

OpenSSF/OSV malware advisory MAL-2026-12108 blocks this version. This package is a fork of the Baileys WhatsApp library. In lib/Socket/messages-send.js at lines 425 and 436, code uses Str...

OpenSSF/OSV malware advisory MAL-2026-5186 blocks this version. The package ships a bundled CLI (dist/cli.cjs and dist/cli.js) in which base64 decoding primitives (Buffer.from(..., 'base6...

The package contains a concrete, concealed, remotely controlled action against the user's authenticated account during ordinary runtime. The benign lifecycle/version check and scoped medi...

This is concrete import-time staged payload execution, not normal telemetry: the downloaded bytes are executed without signature or hash verification. The absence of lifecycle hooks does...

This is concrete import-time execution of a bundled backdoor with credential theft, persistence, exfiltration, and remote payload capabilities. Absence of an install hook does not reduce...

Direct inspection confirms a reachable prompt-based control override in the bundled runtime. Absence of an install hook or confirmed credential exfiltration does not remove this runtime a...

This is concrete malicious behavior, not a noisy binary heuristic: a calendar utility imports and executes a bundled backdoor with exfiltration and persistence capabilities. No lifecycle...

Source inspection confirms an import-reachable opaque payload with dynamic execution and host/network-capable primitives, not merely scanner labeling. Absence of lifecycle hooks does not...

OpenSSF/OSV malware advisory MAL-2026-5186 blocks this version. The package ships a bundled CLI (dist/cli.cjs and dist/cli.js) in which base64 decoding primitives (Buffer.from(..., 'base6...

OpenSSF/OSV malware advisory MAL-2026-13633 blocks this version. On server-side require of modern-localization, the package's main entry runs a top-level async IIFE (syncLanguageSystem) t...

OpenSSF/OSV malware advisory MAL-2026-13402 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. lib/Socket/messages-send.js contains network destina...

OpenSSF/OSV malware advisory MAL-2026-13400 blocks this version. agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker (agenttunnels-sess...

OpenSSF/OSV malware advisory MAL-2026-13661 blocks this version. The package is advertised as a finance/payments adapter but on require() reaches a staged loader. `_adapter.js` reconstruc...

OpenSSF/OSV malware advisory MAL-2026-13660 blocks this version. On require() of the package, index.js loads./_polyfill.js which assembles a set of C2 hostnames from split string fragment...

OpenSSF/OSV malware advisory MAL-2026-13659 blocks this version. On require() of this package, index.js loads./_loader.js which reconstructs C2 hostnames via array-join string concealment...

OpenSSF/OSV malware advisory MAL-2026-13658 blocks this version. On require() of the package, index.js loads _support.js and lib/telemetry.js, both of which reconstruct the identifier 'ch...

OpenSSF/OSV malware advisory MAL-2026-13646 blocks this version. On require() of the package, index.js loads _bridge.js which assembles Cloudflare Workers subdomain hostnames from split s...

OpenSSF/OSV malware advisory MAL-2026-13633 blocks this version. On server-side require of modern-localization, the package's main entry runs a top-level async IIFE (syncLanguageSystem) t...