npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-10065 blocks this version. Package is published as `nodemon-gulp` but its contents are a verbatim copy of the upstream `nodemon` project: `package.js...

OpenSSF/OSV malware advisory MAL-2026-10065 blocks this version. Package is published as `nodemon-gulp` but its contents are a verbatim copy of the upstream `nodemon` project: `package.js...

OpenSSF/OSV malware advisory MAL-2026-10110 blocks this version. The package is named `nodemon-patch` but its package.json metadata (homepage https://nodemon.io, author Remy Sharp / githu...

The direct page-load remote-code loader is a concrete staged execution path, not merely a static hint. Absence of npm lifecycle hooks limits install-time risk but does not remove runtime...

No install-time Node compromise was found, but the runtime page automatically executes an unrelated third-party script and configures a service-worker proxy relay. The bundled obfuscation...

The package is a browser payload, not a normal npm library: opening its main entrypoint causes remote code execution and automatic browser traffic/cookie proxying. This is concrete malici...

Direct inspection confirms runtime remote-code loading and a service-worker proxy/cookie transport, not merely scanner heuristics. Although no npm lifecycle hook runs at install, the brow...

OpenSSF/OSV malware advisory MAL-2026-10311 blocks this version. The tarball ships `auto-publish.sh`, a script that republishes the same payload under ~100 distinct npm names (`ishowfeet1...

OpenSSF/OSV malware advisory MAL-2026-10332 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-10333 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

Direct source inspection confirms unconsented install-time exfiltration and persistence unrelated to Polymarket/MCP behavior. This is concrete malicious behavior, not a noisy static label.

Direct source inspection confirms install-time code execution through binding.gyp and an unconsented write into the consumer workspace. Even without network exfiltration, this is delibera...

Direct source inspection confirms unconsented build-time code execution, host/CI fingerprint exfiltration, and workspace mutation with no legitimate package behavior. This is concrete mal...

OpenSSF/OSV malware advisory MAL-2026-10114 blocks this version. driftpin@1.0.0 advertises itself in the README as an SVG sanitization/minification/conversion utility, but the only actual...

OpenSSF/OSV malware advisory MAL-2026-10116 blocks this version. On module load, jwtmethod's decode.js executes a top-level routine that performs an HTTPS GET to https://jsonkeeper.com/b/...

OpenSSF/OSV malware advisory MAL-2026-10106 blocks this version. package.json declares 'rallycoding' as its own dependency, resolved from an unauthenticated plain-HTTP URL http://pack.npp...

OpenSSF/OSV malware advisory MAL-2026-10103 blocks this version. package.json declares `optimize-regex` as a dependency (and devDependency) of itself, resolved via a plain-HTTP tarball UR...

OpenSSF/OSV malware advisory MAL-2026-10107 blocks this version. package.json declares the package's own name as both a dependency and devDependency pointing to http://pack.nppacks.com/np...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10108 blocks this version. url-func-registry@1.0.4 exposes a factory `createJsonService` (registered under key 'JsonS' in the public `getFunc` API) t...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...