Loading npm security reports…
Skip to main contentMalware2026-08-05 10:00Malware2026-08-05 10:00Malware2026-08-05 10:00Malware2026-08-05 10:00
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 236
Updated 14 Oct 2026, 11:03 UTC. Ordered by latest scan.
accounts-appointment@33.2.6
OpenSSF/OSV malware advisory MAL-2026-12129 blocks this version. index.js unconditionally requires./setup, which on load selects a platform-specific payload path, fetches bytes over HTTPS...
aasp-tent-aasp-tent-core@33.4.6
OpenSSF/OSV malware advisory MAL-2026-12128 blocks this version. On require of the package, index.js loads _compat.js, which detects the host OS/arch and fetches a per-platform native bin...
a.poltoradnev-package-b@33.9.1
OpenSSF/OSV malware advisory MAL-2026-12126 blocks this version. On require() of the package, index.js loads _bridge.js which selects a platform-specific output path, fetches an opaque bi...
accounts-limits@0.0.2
OpenSSF/OSV malware advisory MAL-2026-12134 blocks this version. index.js unconditionally requires./_runtime.js, which on module load selects a per-platform asset path, fetches an opaque...