Loading npm security reports…
Skip to main contentMalware2026-09-30 05:50Malware2026-09-30 05:50Malware2026-09-30 05:50Malware2026-09-30 05:50
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 29
Updated 9 Oct 2026, 04:27 UTC. Ordered by latest scan.
imgbundle@1.0.1
OpenSSF Malicious Packages via OSV confirms imgbundle@1.0.1 as malicious (MAL-2026-17330): Malicious code in imgbundle (npm)
imgbundle@1.0.0
OpenSSF Malicious Packages via OSV confirms imgbundle@1.0.0 as malicious (MAL-2026-17330): Malicious code in imgbundle (npm)
figlet-chalk-render@1.0.0
OpenSSF Malicious Packages via OSV confirms figlet-chalk-render@1.0.0 as malicious (MAL-2026-17226): Malicious code in figlet-chalk-render (npm)
express-session-timer@1.0.15
OpenSSF Malicious Packages via OSV confirms express-session-timer@1.0.15 as malicious (MAL-2026-16065): Malicious code in express-session-timer (npm)
express-session-timer@1.0.11
OpenSSF Malicious Packages via OSV confirms express-session-timer@1.0.11 as malicious (MAL-2026-16065): Malicious code in express-session-timer (npm)