Loading npm security reports…
Skip to main contentMalware2026-08-04 22:30Malware2026-08-04 22:30Malware2026-08-04 22:30Malware2026-08-04 22:30
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 368
Updated 18 Oct 2026, 05:19 UTC. Ordered by latest scan.
tailwindcss-anim@1.3.5
OpenSSF/OSV malware advisory MAL-2026-11487 blocks this version. index.js hides a base64-encoded payload after a long run of tab characters and executes it via eval(atob(...)) at module l...
tailwindcss-anim@1.3.3
OpenSSF/OSV malware advisory MAL-2026-11487 blocks this version. index.js hides a base64-encoded payload after a long run of tab characters and executes it via eval(atob(...)) at module l...
beaver-ui-layout@12.9.6
OpenSSF/OSV malware advisory MAL-2026-11510 blocks this version. The package is advertised as a React UI layout library but on require('beaver-ui-layout') loads _bridge.js, which reconstr...
beaver-ui-items-with-more@12.2.6
OpenSSF/OSV malware advisory MAL-2026-11509 blocks this version. The package's declared postinstall (`node setup.js`) and its main entry `index.js` (which unconditionally calls `require('...