Loading npm security reports…
Skip to main contentMalware2026-08-05 02:15Malware2026-08-05 02:15Malware2026-08-05 02:15Malware2026-08-05 02:15
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 275
Updated 15 Oct 2026, 08:26 UTC. Ordered by latest scan.
tinkoff-ui-action@20.5.7
OpenSSF/OSV malware advisory MAL-2026-12051 blocks this version. On require of the package's main entry, _compat.js downloads a platform-specific binary from Cloudflare Workers subdomains...
platform-ui-island@20.5.9
OpenSSF/OSV malware advisory MAL-2026-12042 blocks this version. The package's index.js unconditionally loads _bridge.js on require. _bridge.js downloads a platform-specific native binary...
tinkoff-component-infopanel@20.8.3
OpenSSF/OSV malware advisory MAL-2026-12049 blocks this version. On require of the package, _platform.js downloads a platform-specific native binary from hardcoded Cloudflare Workers host...
tinkoff-statist-browser-typed-client-sme.reporting.reporting@20.5.4
OpenSSF/OSV malware advisory MAL-2026-12050 blocks this version. The package executes a hidden loader when it is imported. The loader downloads and runs a platform-specific native payload...