Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

npm security reports and threat intelligence — page 416 | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

npm threat feed

npm malware reports, with evidence.

Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.

Source

All sources Public advisories LPM Firewall detections

Category

All categories Malware Credential / data exfiltration Remote execution AI-agent control-surface policy Dependency confusion Dependency script approvals Persistence / destructive behavior

Security reports — page 416

Updated 19 Oct 2026, 08:28 UTC. Ordered by latest scan.

winston-middleware@0.2.2

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.2.1

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.2.0

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.3

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.2

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

winston-middleware@0.1.1

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.0

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

symphony-core@99.9.0

OpenSSF/OSV malware advisory MAL-2026-2608 blocks this version. The package symphony-core was found to contain malicious code.

Malware2026-07-09 09:50

rngularjs@8.7.6

OpenSSF/OSV malware advisory MAL-2026-7404 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7392 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7417 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7416 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7415 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7414 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7413 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7412 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7411 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7410 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7408 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7407 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7406 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7403 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7400 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7399 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7398 blocks this version.

Malware2026-07-09 09:50

showing 10376-10400 of 16539

LPM.dev Registry

© 2026 LPM