Loading npm security reports…
Skip to main contentMalware2026-07-15 05:55Malware2026-07-15 05:55Malware2026-07-15 05:55Malware2026-07-15 05:55
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 396
Updated 18 Oct 2026, 18:41 UTC. Ordered by latest scan.
@emilgroup/gdv-sdk@2.6.1
OpenSSF/OSV malware advisory MAL-2026-2048 blocks this version. The package @emilgroup/gdv-sdk was found to contain malicious code.
@emilgroup/partner-portal-sdk-node@1.1.1
OpenSSF/OSV malware advisory MAL-2026-2054 blocks this version. The package @emilgroup/partner-portal-sdk-node was found to contain malicious code.
@emilgroup/tenant-sdk@1.34.1
OpenSSF/OSV malware advisory MAL-2026-2060 blocks this version. The package @emilgroup/tenant-sdk was found to contain malicious code.
@emilgroup/document-sdk@1.45.1
OpenSSF/OSV malware advisory MAL-2026-2046 blocks this version. The package @emilgroup/document-sdk was found to contain malicious code.