Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 21 Oct 2026, 08:12 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-2905 blocks this version. simple-auth-basic is a malicious npm package that when imported downloads a C2 dropper from https://coingecko-liard.vercel[...
OpenSSF/OSV malware advisory MAL-2026-2905 blocks this version. simple-auth-basic is a malicious npm package that when imported downloads a C2 dropper from https://coingecko-liard.vercel[...
OpenSSF/OSV malware advisory MAL-2026-2905 blocks this version. simple-auth-basic is a malicious npm package that when imported downloads a C2 dropper from https://coingecko-liard.vercel[...
OpenSSF/OSV malware advisory MAL-2026-5867 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...