Loading npm security reports…
Skip to main contentMalware2026-09-25 03:35Malware2026-09-25 03:35Malware2026-09-25 03:35Malware2026-09-25 03:35
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 42
Updated 9 Oct 2026, 13:32 UTC. Ordered by latest scan.
better-dotenv3@1.0.1
OpenSSF Malicious Packages via OSV confirms better-dotenv3@1.0.1 as malicious (MAL-2026-17172): Malicious code in better-dotenv3 (npm)
secure-env3@1.0.1
OpenSSF Malicious Packages via OSV confirms secure-env3@1.0.1 as malicious (MAL-2026-17178): Malicious code in secure-env3 (npm)
wallet-connect-adapter@1.4.2
OpenSSF Malicious Packages via OSV confirms wallet-connect-adapter@1.4.2 as malicious (MAL-2026-17179): Malicious code in wallet-connect-adapter (npm)
n8n-nodes-flowstats@1.0.0
OpenSSF Malicious Packages via OSV confirms n8n-nodes-flowstats@1.0.0 as malicious (MAL-2026-17175): Malicious code in n8n-nodes-flowstats (npm)
n8n-nodes-moonlet-helpers@1.0.4