Loading npm security reports…
Skip to main contentMalware2026-09-24 10:15Malware2026-09-24 10:00Malware2026-09-24 10:00Malware2026-09-24 10:00
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 46
Updated 9 Oct 2026, 16:34 UTC. Ordered by latest scan.
graphql-js-client-transform@6.14.0
OpenSSF Malicious Packages via OSV confirms graphql-js-client-transform@6.14.0 as malicious (MAL-2026-16086): Malicious code in graphql-js-client-transform (npm)
@cartradetech/example-package@1.0.0
OpenSSF Malicious Packages via OSV confirms @cartradetech/example-package@1.0.0 as malicious (MAL-2026-16492): Malicious code in @cartradetech/example-package (npm)
@client-web-next/providers@0.0.1
OpenSSF Malicious Packages via OSV confirms @client-web-next/providers@0.0.1 as malicious (MAL-2026-16507): Malicious code in @client-web-next/providers (npm)
@client-web-next/origination-microfront@0.0.1
OpenSSF Malicious Packages via OSV confirms @client-web-next/origination-microfront@0.0.1 as malicious (MAL-2026-16506): Malicious code in @client-web-next/origination-microfront (npm)