Loading npm security reports…
Skip to main contentMalware2026-08-05 07:45Malware2026-08-05 07:45Malware2026-08-05 07:45Malware2026-08-05 07:45
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 290
Updated 16 Oct 2026, 14:33 UTC. Ordered by latest scan.
app-data-layer@2.1.6
OpenSSF/OSV malware advisory MAL-2026-11052 blocks this version. LPM AI assessed this version as clean; the assessments disagree. Analysis of app-data-layer@2.1.6 (3 files scanned) produc...
twilio-internal@99.99.100
OpenSSF/OSV malware advisory MAL-2026-10934 blocks this version. The twilio-internal package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published...
twilio-deploy@99.99.100
OpenSSF/OSV malware advisory MAL-2026-10933 blocks this version. The twilio-deploy package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by...
twilio-assets@99.99.100
OpenSSF/OSV malware advisory MAL-2026-10932 blocks this version. The twilio-assets package is one of four byte-identical dependency-confusion squats of Twilio's npm namespace published by...