Loading npm security reports…
Skip to main contentMalware2026-07-16 19:45Malware2026-07-16 19:45Malware2026-07-16 19:45Malware2026-07-16 19:45
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 389
Updated 18 Oct 2026, 15:36 UTC. Ordered by latest scan.
xxdxa@1.0.1
OpenSSF/OSV malware advisory MAL-2026-10752 blocks this version. The package's sole file i.js (declared as main) is a heavily obfuscated IIFE whose top-level exploit() runs unconditionall...
loader1@2.1.7
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
loader1@2.1.6
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
loader1@2.1.3
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
loader1