npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-5165 blocks this version. Part of a coordinated multi-package supply-chain attack impersonating EMCD (emcd.io), a legitimate Russian cryptocurrency e...

OpenSSF/OSV malware advisory MAL-2026-5164 blocks this version. Part of a coordinated multi-package supply-chain attack impersonating EMCD (emcd.io), a legitimate Russian cryptocurrency e...

OpenSSF/OSV malware advisory MAL-2026-5165 blocks this version. Part of a coordinated multi-package supply-chain attack impersonating EMCD (emcd.io), a legitimate Russian cryptocurrency e...

OpenSSF/OSV malware advisory MAL-2026-5164 blocks this version. Part of a coordinated multi-package supply-chain attack impersonating EMCD (emcd.io), a legitimate Russian cryptocurrency e...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-7024 blocks this version. package.json declares a `prepare` lifecycle script (`node index.js || true`) that auto-executes on `npm install`. index.js...

OpenSSF/OSV malware advisory MAL-2026-10038 blocks this version. The npm package `antsrcsrctest` masquerades as a "simple date formatting utility" (`index.js` exports a harmless `formatDa...

OpenSSF/OSV malware advisory MAL-2026-10035 blocks this version. The npm package `@wagni_bot/solana-sdk` is a supply-chain credential stealer disguised as a **Solana** SDK. It is one memb...

OpenSSF/OSV malware advisory MAL-2026-10035 blocks this version. The npm package `@wagni_bot/solana-sdk` is a supply-chain credential stealer disguised as a **Solana** SDK. It is one memb...

OpenSSF/OSV malware advisory MAL-2026-10034 blocks this version. The npm package `@wagni_bot/pumpfun-sdk` is a supply-chain credential stealer disguised as a **Pump.fun** SDK. It is one m...