Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

npm security reports and threat intelligence — page 407 | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

npm threat feed

npm malware reports, with evidence.

Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.

Source

All sources Public advisories LPM Firewall detections

Category

All categories Malware Credential / data exfiltration Remote execution AI-agent control-surface policy Dependency confusion Dependency script approvals Persistence / destructive behavior

Security reports — page 407

Updated 19 Oct 2026, 04:13 UTC. Ordered by latest scan.

wallarm-design-system@1.1.0

OpenSSF/OSV malware advisory MAL-2026-7434 blocks this version.

Malware2026-07-09 09:50

sim-apis-chatbot@1.1.0

OpenSSF/OSV malware advisory MAL-2026-7420 blocks this version.

Malware2026-07-09 09:50

web3-runtime-engine@1.0.3

OpenSSF/OSV malware advisory MAL-2026-7437 blocks this version.

Malware2026-07-09 09:50

zircuit-vault@99.0.0

OpenSSF/OSV malware advisory MAL-2026-7446 blocks this version.

Malware2026-07-09 09:50

zircuit-reporter@99.0.0

OpenSSF/OSV malware advisory MAL-2026-7445 blocks this version.

Malware2026-07-09 09:50

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

zircuit-oracle@99.0.0

OpenSSF/OSV malware advisory MAL-2026-7444 blocks this version.

Malware2026-07-09 09:50

zircuit-keeper@99.0.0

OpenSSF/OSV malware advisory MAL-2026-7443 blocks this version.

Malware2026-07-09 09:50

smtp-test-server-node@99.2.2

OpenSSF/OSV malware advisory MAL-2026-7422 blocks this version.

Malware2026-07-09 09:50

smtp-test-server-node@99.2.1

OpenSSF/OSV malware advisory MAL-2026-7422 blocks this version.

Malware2026-07-09 09:50

timelycare@1.0.0

OpenSSF/OSV malware advisory MAL-2026-7428 blocks this version.

Malware2026-07-09 09:50

slow-surf@10.0.0

OpenSSF/OSV malware advisory MAL-2026-5848 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

slow-surf@9.9.9

OpenSSF/OSV malware advisory MAL-2026-5848 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

win-env-setup@3.0.6

OpenSSF/OSV malware advisory MAL-2026-7439 blocks this version.

Malware2026-07-09 09:50

win-env-setup@3.0.5

OpenSSF/OSV malware advisory MAL-2026-7439 blocks this version.

Malware2026-07-09 09:50

serverless-twi-testing@1.0.7

OpenSSF/OSV malware advisory MAL-2026-7418 blocks this version.

Malware2026-07-09 09:50

style-to-objact@99.9.0

OpenSSF/OSV malware advisory MAL-2026-7425 blocks this version.

Malware2026-07-09 09:50

roblox-lua-promise@99.9.0

OpenSSF/OSV malware advisory MAL-2026-7405 blocks this version.

Malware2026-07-09 09:50

sitecore-mm-component-style@99.9.1

OpenSSF/OSV malware advisory MAL-2026-5671 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

stellar-stablecoin-scripts@99.1.0

OpenSSF/OSV malware advisory MAL-2026-7423 blocks this version.

Malware2026-07-09 09:50

theta-sdk@1.0.16

OpenSSF/OSV malware advisory MAL-2026-5652 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

suit-base@45.0.0

OpenSSF/OSV malware advisory MAL-2026-7426 blocks this version.

Malware2026-07-09 09:50

wm-plugin-create-iframe-capturing@21.0.1

OpenSSF/OSV malware advisory MAL-2026-4337 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

wm-plugin-create-iframe-capturing@1.0.1

OpenSSF/OSV malware advisory MAL-2026-4337 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

wm-plugin-json-conditions@13.0.0

OpenSSF/OSV malware advisory MAL-2026-4338 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

wm-plugin-json-conditions@1.0.0

OpenSSF/OSV malware advisory MAL-2026-4338 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...

Malware2026-07-09 09:50

showing 10151-10175 of 16539

LPM.dev Registry

© 2026 LPM