Loading npm security reports…
Skip to main contentMalware2026-08-06 13:55Malware2026-08-06 13:55Malware2026-08-06 13:55Malware2026-08-06 13:55
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 245
Updated 15 Oct 2026, 13:58 UTC. Ordered by latest scan.
@yeaft/webchat-agent@1.0.365
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package installs itself as a user-level service...
@yeaft/webchat-agent@1.0.364
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...
@yeaft/webchat-agent@1.0.363
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...
@zahlen/checkout@0.2.2
OpenSSF/OSV malware advisory MAL-2026-13391 blocks this version. No a static rule or traced code paths flagged malicious behavior in this package. No lifecycle hooks fetching or executing...