Loading npm security reports…
Skip to main contentMalware2026-07-09 23:20Malware2026-07-09 23:20Malware2026-07-09 23:20Malware2026-07-09 23:20
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 432
Updated 20 Oct 2026, 14:06 UTC. Ordered by latest scan.
new-solt@0.0.8
OpenSSF/OSV malware advisory MAL-2026-6285 blocks this version. Package new-solt@0.0.8 contains index.js which imports child_process and invokes execSync with bash and zsh shell strings (...
@rafaelsene01/agent-flow@1.8.0
OpenSSF/OSV malware advisory MAL-2026-6111 blocks this version. The package's main and bin entry, dist/agent-flow.js, is shipped as a heavily obfuscated bundle produced by javascript-obfu...
@rafaelsene01/agent-flow@1.6.0
OpenSSF/OSV malware advisory MAL-2026-6111 blocks this version. The package's main and bin entry, dist/agent-flow.js, is shipped as a heavily obfuscated bundle produced by javascript-obfu...
redis-type-os@1.0.9
OpenSSF/OSV malware advisory MAL-2026-5882 blocks this version. Package is published as `redis-type-os` but all in-package references (README, docs/, CHANGELOG, repository field, author e...