Loading npm security reports…
Skip to main contentMalware2026-09-30 10:30Malware2026-09-30 10:30Malware2026-09-30 10:30Malware2026-09-30 10:30
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 26
Updated 9 Oct 2026, 02:14 UTC. Ordered by latest scan.
@noxleyss/baileys@1.1.10
OpenSSF Malicious Packages via OSV confirms @noxleyss/baileys@1.1.10 as malicious (MAL-2026-17369): Malicious code in @noxleyss/baileys (npm)
@revizahoshii/baileys@0.5.4
OpenSSF Malicious Packages via OSV confirms @revizahoshii/baileys@0.5.4 as malicious (MAL-2026-17375): Malicious code in @revizahoshii/baileys (npm)
@revizahoshii/baileys@0.5.3
OpenSSF Malicious Packages via OSV confirms @revizahoshii/baileys@0.5.3 as malicious (MAL-2026-17375): Malicious code in @revizahoshii/baileys (npm)
@revizahoshii/baileys@0.5.2
OpenSSF Malicious Packages via OSV confirms @revizahoshii/baileys@0.5.2 as malicious (MAL-2026-17375): Malicious code in @revizahoshii/baileys (npm)
@revizahoshii/baileys
