npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-5790 blocks this version. ldpbootstrap-jquery ships and executes an obfuscated Windows PowerShell payload as part of its documented usage. The packag...

OpenSSF/OSV malware advisory MAL-2026-10650 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-10662 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5741 blocks this version. package.json declares scripts.postinstall = `node postinstall.js`. On every `npm install`, postinstall.js runs `execSync('i...

OpenSSF/OSV malware advisory MAL-2026-5741 blocks this version. package.json declares scripts.postinstall = `node postinstall.js`. On every `npm install`, postinstall.js runs `execSync('i...

OpenSSF/OSV malware advisory MAL-2026-10666 blocks this version. crypto-hasher@3.1.3 impersonates the hash-wasm library. Its main entrypoint (dist/index.umd.js) injects code into the WASM...

OpenSSF/OSV malware advisory MAL-2026-5515 blocks this version. On `npm install`, preinstall.js collects hostname, username, cwd, network interfaces, and the names of environment variable...

OpenSSF/OSV malware advisory MAL-2026-10666 blocks this version. crypto-hasher@3.1.3 impersonates the hash-wasm library. Its main entrypoint (dist/index.umd.js) injects code into the WASM...

OpenSSF/OSV malware advisory MAL-2026-10667 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-10667 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-10667 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-2510 blocks this version. Malicious npm package executing base64-decoded shell command to download and run stage-2 payload from C2 server (89.36.224....

OpenSSF/OSV malware advisory MAL-2026-10654 blocks this version. Package @debile/require-dir republishes the code of the well-known require-dir package under a different scope. Its packag...