npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms @haimiya/baileys@9.4.6 as malicious (MAL-2026-16066): Malicious code in @haimiya/baileys (npm)

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces, combined with automatic user-environment package installation. The behavior meets the install-hook...

This package performs unrequested network activity during installation and automatically changes a user's WhatsApp channel subscriptions through a hard-coded maintainer channel. The opt-o...

This is concrete, automatic, destructive mutation of a consumer project at install time, with build-time restoration of package-controlled files. The absence of installer exfiltration doe...

The package has a concrete automatic postinstall path that mutates several unrelated user-level AI-agent control surfaces. No self-dependency or exfiltration was needed to establish insta...

This is a concrete install-hook abuse chain: automatic lifecycle execution obtains and runs remote code, globally installs software, and persists fetched content. The isolated shared-agen...

The automatic postinstall chain modifies another package's launcher and renderer, then makes the modification self-healing and persistent across normal launches. This meets the install-ho...

OpenSSF Malicious Packages via OSV confirms server-authorized-cleanup@1.1.0 as malicious (MAL-2026-16079): Malicious code in server-authorized-cleanup (npm)

OpenSSF Malicious Packages via OSV confirms external_deps_enjoyer@1.0.0 as malicious (MAL-2026-16076): Malicious code in external_deps_enjoyer (npm)

OpenSSF Malicious Packages via OSV confirms kiki-baileys@1.0.0 as malicious (MAL-2026-16033): Malicious code in kiki-baileys (npm)

OpenSSF Malicious Packages via OSV confirms service-home@0.0.1 as malicious (MAL-2026-16039): Malicious code in service-home (npm)

OpenSSF Malicious Packages via OSV confirms op-ts-server-core@0.0.1 as malicious (MAL-2026-16034): Malicious code in op-ts-server-core (npm)

OpenSSF Malicious Packages via OSV confirms ecobee-home@0.0.1 as malicious (MAL-2026-14475): Malicious code in ecobee-home (npm)

OpenSSF Malicious Packages via OSV confirms ecobee2@0.0.1 as malicious (MAL-2026-14476): Malicious code in ecobee2 (npm)

OpenSSF Malicious Packages via OSV confirms ecobee-api@0.0.1 as malicious (MAL-2026-14474): Malicious code in ecobee-api (npm)

OpenSSF Malicious Packages via OSV confirms dcftunnel@0.4.5 as malicious (MAL-2026-15975): Malicious code in dcftunnel (npm)

OpenSSF Malicious Packages via OSV confirms sonmors@2.11.2 as malicious (MAL-2026-16055): Malicious code in sonmors (npm)

The package performs automatic install-time remote shell execution and installs a second executable component outside the reviewed artifact. This is an unconsented install-hook code-loadi...

The package performs unconsented remote payload execution during postinstall and retrieves mutable remote agent content. This is concrete install-hook abuse with a remote code execution p...

This package has a concrete automatic install-time collection-and-exfiltration path. The empty runtime API does not justify or mitigate that behavior.

The package performs broad AI-agent configuration and project mutations automatically during dependency installation, then uses a detached retry mechanism to preserve them. This is concre...