Loading npm security reports…
Skip to main contentMalware2026-07-14 05:00Malware2026-07-14 05:00Malware2026-07-14 05:00Malware2026-07-14 05:00
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 406
Updated 20 Oct 2026, 01:05 UTC. Ordered by latest scan.
@vite-mcp/vite-type@6.44.1
OpenSSF/OSV malware advisory MAL-2026-10525 blocks this version. Package @vite-mcp/vite-type@6.44.1 impersonates the legitimate vite package: package.json declares name '@vite-mcp/vite-ty...
@wrenfield/abitype@1.2.7
OpenSSF/OSV malware advisory MAL-2026-10529 blocks this version. Package @wrenfield/abitype impersonates the well-known wevm/abitype library: it copies the upstream README verbatim (links...
@velkov/isows@1.0.10
OpenSSF/OSV malware advisory MAL-2026-10524 blocks this version. Package is published as `@velkov/isows` while its README, repository (`wevm/isows`), description ("Isomorphic WebSocket"),...
@tabrex/bs58@6.0.3
OpenSSF/OSV malware advisory MAL-2026-10523 blocks this version. @tabrex/bs58 ships the verbatim README, API surface, and repository URL of the legitimate cryptocoinjs/bs58 package (packa...