npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-13434 blocks this version. The exported bootstrapCore() unconditionally initializes the event bus with a hardcoded amqps:// URL containing embedded c...

OpenSSF/OSV malware advisory MAL-2026-13433 blocks this version. On `npm install`, the package's `postinstall` hook runs `scripts/telemetry.js`, which collects installer-side reconnaissan...

OpenSSF/OSV malware advisory MAL-2026-13431 blocks this version. payload.js is declared as the package `main` and runs an IIFE immediately on require/import. It fetches a wordlist of Linu...

OpenSSF/OSV malware advisory MAL-2026-13431 blocks this version. payload.js is declared as the package `main` and runs an IIFE immediately on require/import. It fetches a wordlist of Linu...

OpenSSF/OSV malware advisory MAL-2026-13400 blocks this version. agenttunnels ships an MCP bridge whose customer-role tools accept payloads from a remote session worker (agenttunnels-sess...

OpenSSF/OSV malware advisory MAL-2026-12488 blocks this version. The package's `tt-help watchdog` subcommand starts a long-running agent that POSTs heartbeats to a remote server (default...

Source inspection confirms an import-time hidden executable with concrete backdoor, exfiltration, and persistence functionality. No install hook is needed because normal application impor...

Although installation itself has no lifecycle execution, the package intentionally ships a browser-executed deceptive redirect payload with a concealed destination. The lack of a legitima...

OpenSSF/OSV malware advisory MAL-2026-13404 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. index.js is a top-level self-decoding IIFE that XOR-...

OpenSSF/OSV malware advisory MAL-2026-13404 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. index.js is a top-level self-decoding IIFE that XOR-...

Although it has no npm lifecycle hook, the declared entrypoint is an obfuscated fake-verification redirector with no package-aligned purpose. The concealed destination and query forwardin...

The package’s public JavaScript math functions are a facade for an import-time native backdoor. The pinned hash verifies the malicious binary rather than mitigating it.

OpenSSF/OSV malware advisory MAL-2026-13419 blocks this version. The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported `client...

OpenSSF/OSV malware advisory MAL-2026-13419 blocks this version. The package is published as a runtime for 'brt-built botruntime agents' and its client.d.ts describes the exported `client...

OpenSSF/OSV malware advisory MAL-2026-13428 blocks this version. The `conductor daemon` command (bin/conductor-daemon.js -> src/daemon.js) opens a WebSocket to https://conductor.conductor...

OpenSSF/OSV malware advisory MAL-2026-13427 blocks this version. The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync('curl -...

OpenSSF/OSV malware advisory MAL-2026-13427 blocks this version. The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync('curl -...

OpenSSF/OSV malware advisory MAL-2026-13427 blocks this version. The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync('curl -...

OpenSSF/OSV malware advisory MAL-2026-13427 blocks this version. The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync('curl -...

OpenSSF/OSV malware advisory MAL-2026-13427 blocks this version. The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync('curl -...

OpenSSF/OSV malware advisory MAL-2026-13427 blocks this version. The package ships scripts/dependency-manager.js which, when run as part of the install lifecycle, invokes execSync('curl -...