Loading npm security reports…
Skip to main contentMalware2026-08-07 13:50Malware2026-08-07 13:50Malware2026-08-07 13:50Malware2026-08-07 13:50
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 223
Updated 15 Oct 2026, 03:27 UTC. Ordered by latest scan.
bnpl-blocks-atom-bnpl-faq-item@35.8.2
OpenSSF/OSV malware advisory MAL-2026-13528 blocks this version. The package's main entry (index.js) requires./_ext at module load. _ext.js downloads a platform-specific binary from hardc...
bnpl-blocks-atom-bnpl-checkbox@35.6.1
OpenSSF/OSV malware advisory MAL-2026-13527 blocks this version. On require() of the package main, _polyfill.js runs an async bootstrap that reconstructs network destinations from string-...
dojo-rn-interview@1.0.1
OpenSSF/OSV malware advisory MAL-2026-13549 blocks this version. dojo-rn-interview@1.0.1 declares a preinstall script that runs index.js on `npm install`. The script collects host identif...
sui-graphql-client@0.2.0
OpenSSF/OSV malware advisory MAL-2026-13475 blocks this version. Package sui-graphql-client@0.1.0 was scanned across 3 files with no a static rule matches and no traced behaviors indicati...