Loading npm security reports…
Skip to main contentMalware2026-08-05 10:00Malware2026-08-05 10:00Malware2026-08-05 10:00Malware2026-08-05 10:00
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 279
Updated 16 Oct 2026, 08:56 UTC. Ordered by latest scan.
aasp-tent-aasp-tent-core@0.0.2
OpenSSF/OSV malware advisory MAL-2026-12128 blocks this version. On require of the package, index.js loads _compat.js, which detects the host OS/arch and fetches a per-platform native bin...
a.poltoradnev-package-b@0.0.2
OpenSSF/OSV malware advisory MAL-2026-12126 blocks this version. On require() of the package, index.js loads _bridge.js which selects a platform-specific output path, fetches an opaque bi...
arbocrate-sla-prober-arbocrate-sla-prober-core@12.7.1
OpenSSF/OSV malware advisory MAL-2026-12140 blocks this version. On require() of the package, index.js loads setup.js, which resolves the running platform and architecture, downloads a pl...
accounts-timeline@12.3.7
OpenSSF/OSV malware advisory MAL-2026-12137 blocks this version. On require of the package's main entry, index.js loads setup.js, which schedules a platform-selection routine via process....