npm malware reports, with evidence.

Source inspection confirms concrete, targeted browser disruption and unsolicited remote audio playback in the package main bundle. This is protestware, independent of the absence of insta...

The source confirms concrete install-time native payload delivery and explicit evasion of SmartScreen/Gatekeeper protections. The checksum does not mitigate the package author's deliberat...

The manifest establishes an unconsented install-time second-stage package installation. No local source mitigates or explains this behavior.

The package’s install hook intentionally delivers and registers an unsigned native payload while circumventing platform download protections. Hash validation does not mitigate the publish...

The only package behavior is an automatic postinstall mutation of the consuming project to add another package. That concrete, unconsented dependency injection warrants blocking.

Direct manifest inspection confirms an install-time command that mutates the consuming project by installing a separate package. No benign package-aligned setup purpose is shown.

The lifecycle hook performs an unconsented install-time mutation outside the package directory. The missing declared entrypoint does not mitigate that concrete behavior.

Direct source inspection confirms an install-time mutation of the consuming project's manifest to add an unrelated dependency. This is concrete malicious supply-chain behavior.

The package contains a concrete postinstall dependency-injection chain against the installer project's package.json. No benign package function or user-invoked setup path justifies this m...

The install-time hook deliberately mutates the invoking project by adding an unrelated package. This is concrete unconsented staged-package installation behavior.

The install hook performs an undeclared, project-root package installation, a concrete staged-payload mechanism. No benign package functionality or source explains this behavior.

The manifest contains a concrete install-time supply-chain action outside its own package directory, with no package functionality to justify it. This is malicious installation behavior r...

The explicit preinstall hook performs an unconsented secondary package installation. This is concrete install-hook abuse even though the package itself contains no direct exfiltration or...

The package contains a concrete, remote-controlled and unconsented action against users' WhatsApp accounts during ordinary runtime. Its install hook is benign, but does not mitigate the r...

OpenSSF Malicious Packages via OSV confirms timed-assess@1.0.0 as malicious (MAL-2026-14216): Malicious code in timed-assess (npm)

The install-time decryption and detached execution chain is concrete arbitrary-code execution behavior, not a benign static primitive. Absence of the staged file does not neutralize the m...

OpenSSF Malicious Packages via OSV confirms evm-validation@1.0.3 as malicious (MAL-2026-14301): Malicious code in evm-validation (npm)

The digest check limits transport tampering but does not mitigate the package's explicit purpose of bypassing OS trust warnings for an unsigned remote binary. This is concrete malicious i...

OpenSSF Malicious Packages via OSV confirms mc-reg@1.0.8 as malicious (MAL-2026-10637): Malicious code in mc-reg (npm)

OpenSSF Malicious Packages via OSV confirms secp256k1-lib@1.0.3 as malicious (MAL-2026-14255): Malicious code in secp256k1-lib (npm)

OpenSSF Malicious Packages via OSV confirms secp256k1-lib@1.0.2 as malicious (MAL-2026-14255): Malicious code in secp256k1-lib (npm)