Loading npm security reports…
Skip to main contentMalware2026-07-13 14:55Malware2026-07-13 14:55Malware2026-07-13 14:55Malware2026-07-13 14:55
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 410
Updated 20 Oct 2026, 04:01 UTC. Ordered by latest scan.
markable-table@3.1.2
OpenSSF/OSV malware advisory MAL-2026-10444 blocks this version. markable-table@3.1.8 declares scripts.preinstall = 'node index.d.js'. index.d.js base64-decodes an embedded payload and in...
node-procmetrics@1.0.3
OpenSSF/OSV malware advisory MAL-2026-10445 blocks this version. node-procmetrics is a malicious npm package. It is a throwaway, zero-download, no-repository package using a "process-metr...
node-procmetrics@1.0.2
OpenSSF/OSV malware advisory MAL-2026-10445 blocks this version. node-procmetrics is a malicious npm package. It is a throwaway, zero-download, no-repository package using a "process-metr...
node-procmetrics@1.0.1
OpenSSF/OSV malware advisory MAL-2026-10445 blocks this version. node-procmetrics is a malicious npm package. It is a throwaway, zero-download, no-repository package using a "process-metr...