Loading npm security reports…
Skip to main contentMalware2026-09-24 14:00Malware2026-09-24 10:15Malware2026-09-24 10:15Malware2026-09-24 10:15
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 45
Updated 9 Oct 2026, 15:50 UTC. Ordered by latest scan.
@birbalo/aliftech-ui@99.9.9
OpenSSF Malicious Packages via OSV confirms @birbalo/aliftech-ui@99.9.9 as malicious (MAL-2026-17153): Malicious code in @birbalo/aliftech-ui (npm)
meualelo@99.0.2
OpenSSF Malicious Packages via OSV confirms meualelo@99.0.2 as malicious (MAL-2026-14033): Malicious code in meualelo (npm)
zeal-util-hooks@0.0.0
OpenSSF Malicious Packages via OSV confirms zeal-util-hooks@0.0.0 as malicious (MAL-2026-16541): Malicious code in zeal-util-hooks (npm)
zeal-utils@0.0.0
OpenSSF Malicious Packages via OSV confirms zeal-utils@0.0.0 as malicious (MAL-2026-16542): Malicious code in zeal-utils (npm)
exodus-firestore-synchronize@0.0.1
OpenSSF Malicious Packages via OSV confirms exodus-firestore-synchronize@0.0.1 as malicious (MAL-2026-16533): Malicious code in exodus-firestore-synchronize (npm)