Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 21 Oct 2026, 02:25 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-10028 blocks this version. The npm package `@wagni_bot/metemask-sdk` is a supply-chain credential stealer disguised as a **MetaMask (misspelled 'mete...
OpenSSF/OSV malware advisory MAL-2026-7186 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-7185 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-7184 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-7183 blocks this version.