npm malware reports, with evidence.

This is a concrete stealth, persistence, capture, and external-submission chain, not a diagnostic utility. The benign postinstall hook does not mitigate the malicious user-executed behavior.

This is concrete, auto-starting cryptomining behavior in the published runtime entrypoint, not merely a suspicious primitive. The absence of install hooks does not mitigate runtime harm t...

This package is a deceptive, automatically activated browser cryptominer rather than the advertised common utility package. The lack of install hooks does not mitigate the runtime attack.

The runtime entry contains an automatically invoked, obfuscated Xelis mining payload with remote configuration, WebSocket, and Worker execution. This is concrete unauthorized cryptomining...

This is concrete browser cryptomining behavior, not a benign utility or merely suspicious primitive. Dynamic endpoint construction prevents naming a verified host, but does not weaken the...

The shipped entrypoint auto-runs an obfuscated Xelis cryptocurrency miner at runtime. The absence of install hooks does not mitigate the malicious import-time/browser execution.

The artifact contains concrete automatic cryptomining behavior and deceptive package documentation. It is not an install hook, but import-time execution provides a direct malicious runtim...

OpenSSF Malicious Packages via OSV confirms depcruise-fmt@99.9.1 as malicious (MAL-2026-14054): Malicious code in depcruise-fmt (npm)

OpenSSF Malicious Packages via OSV confirms depcruise-wrap-stream-in-html@99.9.1 as malicious (MAL-2026-14068): Malicious code in depcruise-wrap-stream-in-html (npm)

OpenSSF Malicious Packages via OSV confirms depcruise-baseline@99.9.1 as malicious (MAL-2026-14053): Malicious code in depcruise-baseline (npm)

This is concrete unconsented account manipulation on the package's normal runtime path, controlled by a remote payload list. The lifecycle script itself is benign but does not mitigate th...

This is concrete, automatic install-time host compromise behavior, not an inert installer primitive. The lack of observed exfiltration does not mitigate the concealed privileged remote-ac...

Concrete unconsented postinstall persistence and remote-access changes establish malware behavior. No exfiltration endpoint is needed to substantiate the local administrative backdoor.

OpenSSF Malicious Packages via OSV confirms gunzip-js@99.9.1 as malicious (MAL-2026-14056): Malicious code in gunzip-js (npm)

This is concrete install-time privilege escalation, stealth, and remote-access enablement rather than a legitimate package-aligned installer. The absence of a web endpoint does not mitiga...

This package performs a malicious install-time Windows backdoor chain rather than a package-aligned setup. The absence of outbound JavaScript networking does not reduce the concrete remot...

This is concrete install-time hostile behavior, not merely an administrative installer: it creates concealed privileged remote access and employs impersonation and trace removal. Absence...

The automatic lifecycle chain performs concrete privileged persistence and remote-access-enabling changes, including stealth measures. This is malicious behavior, not a package-aligned in...

The lifecycle hook causes these privileged, security-weakening changes without an explicit user command. The absence of observed exfiltration does not mitigate the concrete backdoor-like...

Source inspection confirms an automatically activated, obfuscated browser cryptominer rather than a package-aligned utility. The absence of a consumer install hook does not mitigate runti...

The lifecycle hook is benign, but runtime source establishes concealed, automatic modification of outbound user media with package-controlled newsletter metadata. This is concrete decepti...