Loading npm security reports…
Skip to main contentMalware2026-07-17 01:40Malware2026-07-17 01:25Malware2026-07-17 01:25Malware2026-07-17 01:25
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 387
Updated 18 Oct 2026, 14:44 UTC. Ordered by latest scan.
terminal-mascot@1.0.0
OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...
px8my@1.0.47
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
px8my@1.0.46
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
px8my@1.0.45
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
px8my
