Loading npm security reports…
Skip to main contentMalware2026-09-29 23:45Malware2026-09-29 23:45Malware2026-09-29 23:45Malware2026-09-29 22:30
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 36
Updated 9 Oct 2026, 09:16 UTC. Ordered by latest scan.
test-agency-assignment-02@1.0.5
OpenSSF Malicious Packages via OSV confirms test-agency-assignment-02@1.0.5 as malicious (MAL-2026-17297): Malicious code in test-agency-assignment-02 (npm)
test-agency-assignment-01@1.0.5
OpenSSF Malicious Packages via OSV confirms test-agency-assignment-01@1.0.5 as malicious (MAL-2026-17296): Malicious code in test-agency-assignment-01 (npm)
test-agency-assign@1.0.4
OpenSSF Malicious Packages via OSV confirms test-agency-assign@1.0.4 as malicious (MAL-2026-17295): Malicious code in test-agency-assign (npm)
@chatunity/baileys@3.2.0
OpenSSF Malicious Packages via OSV confirms @chatunity/baileys@3.2.0 as malicious (MAL-2026-17287): Malicious code in @chatunity/baileys (npm)
