Loading npm security reports…
Skip to main contentMalware2026-07-09 23:10Malware2026-07-09 23:10Malware2026-07-09 23:10Malware2026-07-09 23:10
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 383
Updated 18 Oct 2026, 16:45 UTC. Ordered by latest scan.
react-simple-utils-kit@1.0.3
OpenSSF/OSV malware advisory MAL-2026-6303 blocks this version. Package advertises itself as 'a simple date formatting utility for React projects' (3-function index.js), but ships a posti...
block-slot@1.0.9
OpenSSF/OSV malware advisory MAL-2026-6416 blocks this version. Pattern matches fired on index.js for the co-occurrence of child_process require, HTTP GET calls, and env-related keywords...
local-ip-helper@0.1.0
OpenSSF/OSV malware advisory MAL-2026-6282 blocks this version. index.js imports child_process and calls execSync with bash and zsh (lines 301 and 317). Without further context, it is unc...
parket-flow@3.0.1
OpenSSF/OSV malware advisory MAL-2026-6334 blocks this version. index.js imports child_process and invokes execSync with bash and zsh shells (index.js line 1, 301, 317). Without traced ex...