Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

npm security reports and threat intelligence — page 421 | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

npm threat feed

npm malware reports, with evidence.

Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.

Source

All sources Public advisories LPM Firewall detections

Category

All categories Malware Credential / data exfiltration Remote execution AI-agent control-surface policy Dependency confusion Dependency script approvals Persistence / destructive behavior

Security reports — page 421

Updated 19 Oct 2026, 10:54 UTC. Ordered by latest scan.

angutarjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7193 blocks this version.

Malware2026-07-09 09:30

angzlarjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7204 blocks this version.

Malware2026-07-09 09:30

angylarjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7203 blocks this version.

Malware2026-07-09 09:30

angxlarjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7202 blocks this version.

Malware2026-07-09 09:30

angwlarjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7201 blocks this version.

Malware2026-07-09 09:30

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

angvlarjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7200 blocks this version.

Malware

2026-07-09 09:30

anjularjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7205 blocks this version.

Malware2026-07-09 09:30

axgularjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7215 blocks this version.

Malware2026-07-09 09:30

atgularjs@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7212 blocks this version.

Malware2026-07-09 09:30

autoprethixer@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7214 blocks this version.

Malware2026-07-09 09:30

autoprafixar@1.1.4

OpenSSF/OSV malware advisory MAL-2026-7213 blocks this version.

Malware2026-07-09 09:30

OpenSSF/OSV malware advisory MAL-2026-7209 blocks this version.

Malware2026-07-09 09:30

anjularjs@1.1.2

OpenSSF/OSV malware advisory MAL-2026-7205 blocks this version.

Malware2026-07-09 09:30

axgularjs@1.1.2

OpenSSF/OSV malware advisory MAL-2026-7215 blocks this version.

Malware2026-07-09 09:30

atgularjs@1.1.2

OpenSSF/OSV malware advisory MAL-2026-7212 blocks this version.

Malware2026-07-09 09:30

autoprethixer@1.1.2

OpenSSF/OSV malware advisory MAL-2026-7214 blocks this version.

Malware2026-07-09 09:30

autoprafixar@1.1.2

OpenSSF/OSV malware advisory MAL-2026-7213 blocks this version.

Malware2026-07-09 09:30

OpenSSF/OSV malware advisory MAL-2026-7209 blocks this version.

Malware2026-07-09 09:30

tailwind-core@4.3.1

OpenSSF/OSV malware advisory MAL-2026-7026 blocks this version. The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwi...

Malware2026-07-09 04:05

tailwind-core@4.3.0

OpenSSF/OSV malware advisory MAL-2026-7026 blocks this version. The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwi...

Malware2026-07-09 04:05

tailwind-core@0.0.0

OpenSSF/OSV malware advisory MAL-2026-7026 blocks this version. The npm package tailwind-core versions 4.3.1 and 4.3.2 contain remote code execution payloads hidden in the exported Tailwi...

Malware2026-07-09 04:05

mailconfirmer@3.3.53

OpenSSF/OSV malware advisory MAL-2026-5750 blocks this version. The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log dem...

Malware2026-07-09 00:20

mailconfirmer@3.3.46

OpenSSF/OSV malware advisory MAL-2026-5750 blocks this version. The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log dem...

Malware2026-07-09 00:20

mailconfirmer@3.3.39

OpenSSF/OSV malware advisory MAL-2026-5750 blocks this version. The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log dem...

Malware2026-07-09 00:20

mailconfirmer@3.3.38

OpenSSF/OSV malware advisory MAL-2026-5750 blocks this version. The package advertises itself as an email-confirmation utility, but index.js contains only no-op stubs that console.log dem...

Malware2026-07-09 00:20

showing 10501-10525 of 16539

LPM.dev Registry

© 2026 LPM