npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...

OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...

OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...

OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...

Source inspection confirms deliberate third-party protected-process targeting, DLL injection, masquerading, and persistence. The lack of install-time execution does not negate the concret...

OpenSSF/OSV malware advisory MAL-2026-10778 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. package.json declares a preinstall script that runs...

OpenSSF/OSV malware advisory MAL-2026-10775 blocks this version. Package masquerades as an n8n community node (package.json declares n8n.nodes: ["MyNode.js"], a trivial placeholder) while...

OpenSSF/OSV malware advisory MAL-2026-10776 blocks this version. The package advertises itself as a community utility node for n8n but its declared main (index.js) is a self-executing IIF...

OpenSSF/OSV malware advisory MAL-2026-10777 blocks this version. The package advertises itself as an n8n community-node utility but its main entry index.js executes a recon routine at mod...

OpenSSF/OSV malware advisory MAL-2026-10774 blocks this version. The OpenSSF Package Analysis project identified 'n8n-nodes-api-finder' @ 1.0.0 (npm) as malicious.

Source establishes a concrete covert assessment-cheating and proctor-evasion workflow with persistence, not a benign DOM utility. The unused browser-cookie helper further raises risk, whi...

OpenSSF/OSV malware advisory MAL-2026-10769 blocks this version. On npm install, the package's postinstall hook executes index.js, which POSTs the installer's full process.env, OS usernam...

The package contains concrete import-time arbitrary payload execution in its published Node entrypoints. The behavior is concealed in build artifacts and is unrelated to the library's blo...

The package's real export path introduces obfuscated system reconnaissance and remote-capable execution primitives that are not required for Chai assertions. This is malicious import-time...

The package contains an undocumented, unconditionally triggered detached subprocess and database-connection payload unrelated to its stated testing utility. This is concrete malicious run...

OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...

OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...