npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-11456 blocks this version. The package's postinstall hook invokes lib/report.js, which harvests the developer's email (queried via `gh api user/email...

OpenSSF/OSV malware advisory MAL-2026-11455 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-11454 blocks this version. The package is named 'ai-backup-script' but performs no backup functionality. lib/report.js collects the installer's git/G...

OpenSSF/OSV malware advisory MAL-2026-11453 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-11454 blocks this version. The package is named 'ai-backup-script' but performs no backup functionality. lib/report.js collects the installer's git/G...

OpenSSF/OSV malware advisory MAL-2026-11434 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-11430 blocks this version. npm package list-issue-predecessor-dependencies-block@99.0.0 auto-executes index.js from three lifecycle hooks (preinstall...

The package contains a concrete, covert, remote-controlled mutation of the user's WhatsApp account at normal runtime. This is not required by the documented connection flow and is distinc...

The package's declared icon/adapter behavior does not justify hidden import-time remote binary execution. The directly inspected loader establishes a concrete staged-malware chain.

This is concrete import-time remote payload execution with concealed delivery infrastructure and no usable integrity check. It is unrelated to the exposed payments API.

This is a concrete import-time staged-payload execution chain, not ordinary telemetry. The larger telemetry module independently contains the same payload-download-and-launch capability w...

The package contains a real, import-time, targeted page-disruption payload rather than merely suspicious primitives. Lack of install hooks does not mitigate runtime harm to downstream bro...

OpenSSF/OSV malware advisory MAL-2026-11427 blocks this version. package.json declares a preinstall hook that runs vishu.js on npm install. The script resolves the installer's public IP v...

This is a concealed staged malware loader, not calendar parsing: it dynamically evaluates hidden code, writes a remote executable, and executes it. Absence of lifecycle hooks does not mit...

This is concrete, automatic abuse of a connected third-party account rather than a package-aligned API exposed for caller use. The benign preinstall hook does not mitigate the runtime pay...

Source establishes a concrete, automatic, unauthorized account mutation on the ordinary runtime path, with a remotely controllable target list. The benign preinstall version check does no...

Source inspection confirms concrete install-time collection and local persistence rather than a scanner-only match. The absence of networking limits impact but does not remove the unconse...

Source inspection confirms a postinstall side effect that collects local metadata and writes it outside the package, aligned with the package's dependency-confusion PoC description. Absen...

Direct inspection confirms an automatic postinstall collector and file write; the benign runtime entrypoint does not mitigate that install-time behavior. No network transmission was found.

Source inspection confirms the lifecycle payload and its local metadata collection/write behavior. The benign runtime entrypoint does not mitigate the install-time action.

This is not a benign logger/middleware implementation: its entrypoint activates an opaque payload with credential-targeting, networking, and execution capabilities. The lack of an install...