npm malware reports, with evidence.

This is an automatic install-time credential-harvesting and reverse-shell payload, reinforced by explicit typosquat metadata. It warrants blocking.

This is an automatic install-time credential-exfiltration and reverse-shell chain, not a user-invoked administrative feature. The hard-coded external server and typosquat metadata further...

The package's automatic postinstall makes broad changes to consumer and user AI-agent configuration, then persists a future lifecycle command in the consumer project. This meets the block...

The automatic lifecycle hook performs unpinned remote shell execution and installs an external executable engine, forming a concrete install-time remote-code-execution chain. Version matc...

The package has a concrete automatic install-time mutation of a foreign AI-agent dependency. The source does not show exfiltration, but the unconsented overwrite is sufficient install-hoo...

The package has a concrete automatic postinstall chain that deploys content across broad, foreign AI-agent configuration directories. Its conflict safeguards do not make the automatic cro...

This is a concealed, remotely controlled browser redirect packaged as an npm entry point. The lack of install hooks does not mitigate the delivered phishing or malware-routing behavior.

This is an automatic postinstall mutation of a broad, foreign AI-agent control surface. The package installs event-triggered commands and permissions into global Claude Code configuration...

The package has a concrete automatic postinstall hook that invokes an AI-agent skills synchronization command. This is unconsented install-hook abuse of a foreign control surface.

The automatic lifecycle hook performs privileged host configuration and service activation. This is concrete install-hook abuse, despite CI and non-interactive guards.

This is an unconsented postinstall mutation of broad and foreign AI-agent control surfaces. The lifecycle hook and recursive overwrite behavior establish concrete install-hook abuse despi...

The package contains concealed, automatic, and remotely controlled actions that alter the user's WhatsApp account. This is concrete unconsented behavior, not normal media or socket functi...

The automatic lifecycle hook executes a remotely fetched installer and mutates a foreign AI-agent environment plus user-home and desktop state. This meets the install-hook abuse blocking...

This is a concrete automatic credential-exfiltration chain unrelated to wallet balance checking. Its install hook and runtime API both activate the scanner, so it should be blocked.

The package’s import path launches a detached binary whose embedded commands implement backdoor, payload-execution, and credential-harvesting functionality. This is concrete malicious beh...

The code implements a concealed, persistent page-locking payload with no evident legitimate package interface. Absence of installation hooks and network activity limits the impact but doe...

OpenSSF Malicious Packages via OSV confirms html-to-gutenberg@4.2.18 as malicious (MAL-2026-6359): Malicious code in html-to-gutenberg (npm)

OpenSSF Malicious Packages via OSV confirms tailwindcss-3d-animate@1.2.0 as malicious (MAL-2026-14567): Malicious code in tailwindcss-3d-animate (npm)

The package contains a concrete, automatic destructive install hook targeting consumer dependencies. This warrants blocking regardless of otherwise ordinary runtime library code.

Automatic installation performs destructive and broad consumer-project changes, including AI-agent instruction files. This meets the install-hook abuse blocking policy despite no observed...

The automatic postinstall hook mutates foreign consumer application files and root-level AI-agent instruction files. This meets the policy for malicious install-hook abuse despite no obse...