npm malware reports, with evidence.

The manifest contains a concrete automatic install-time remote payload execution and cron persistence chain. The minimal runtime module does not justify this behavior.

Source inspection confirms an automatic install hook that fetches and executes a remote payload, then establishes cron persistence. This is concrete malicious install-hook abuse.

This package performs unconsented remote code execution during preinstall and persists it through cron. This is concrete malware behavior, not a logging feature.

Direct source inspection confirms an automatic install hook that executes an unverified remote script and creates cron persistence. The benign-looking runtime stub does not mitigate this...

This is concrete unconsented install-time remote code execution with persistence. The harmless runtime stub does not mitigate the lifecycle attack.

The package performs unconsented install-time host fingerprinting and external transmission. Its empty runtime code does not justify that behavior.

The package performs unconsented install-time host reconnaissance and exfiltrates it to a fixed external endpoint. Its only runtime file is empty, leaving no package function that justifi...

The automatic SVG import, deliberate obfuscation, and dynamic code execution are incompatible with a passive SVG package. Lack of install hooks reduces install-time risk but does not remo...

Source inspection confirms a concrete concealed capture-and-AI-solving payload with proctoring evasion and persistence. The benign postinstall hook does not reduce the risk of the explici...

Source inspection confirms a concrete stealth, persistence, capture, and AI-assisted cheating workflow. Its credential-handling code and bundled credential material compound the risk, so...

This package uses an automatic install hook to persist a GitHub Actions workflow in a consumer repository and transmit repository metadata externally. The behavior is unconsented install-...

This package uses an automatic install hook to implant a persistent workflow into consumer repositories and transmit their metadata to an external service. The behavior is concrete, uncon...

This is concealed import-time malware, not functionality required for an MFA library. The remote payload execution and multi-method persistence warrant blocking despite the lack of an npm...

This package combines an automatic npm lifecycle hook with silent deletion and broad third-party Claude MCP registration. The observed credential forwarding increases the impact beyond or...

The automatic postinstall chain injects hooks into multiple detected AI-agent configurations and establishes background persistence. This meets the install-hook abuse blocking policy even...

This is malicious under the firewall policy because an npm postinstall automatically modifies broad, foreign AI-agent control surfaces and creates persistence. The local-only command hand...

Source inspection confirms unconsented install-time transmission of the host name to an external collection endpoint. The automatic hooks and self-dependency increase the supply-chain risk.

The package performs concealed, unconsented account actions at runtime. Benign install hooks do not offset the automatic follow behavior.

OpenSSF Malicious Packages via OSV confirms @fleetbo/svro@0.0.42 as malicious (MAL-2026-14586): Malicious code in @fleetbo/svro (npm)

OpenSSF Malicious Packages via OSV confirms @fleetbo/svro@0.0.40 as malicious (MAL-2026-14586): Malicious code in @fleetbo/svro (npm)

OpenSSF Malicious Packages via OSV confirms @fleetbo/svro@0.0.39 as malicious (MAL-2026-14586): Malicious code in @fleetbo/svro (npm)