Loading npm security reports…
Skip to main contentMalware2026-07-09 09:30Malware2026-07-09 09:30Malware2026-07-09 09:30Malware2026-07-09 09:30Malware2026-07-09 09:30
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 472
Updated 21 Oct 2026, 13:29 UTC. Ordered by latest scan.
babelcode_js@99.12.9
OpenSSF/OSV malware advisory MAL-2026-7216 blocks this version.
apple-mycelium-internal-research@99.9.11
OpenSSF/OSV malware advisory MAL-2026-7208 blocks this version.
apache-arrow-17@9.9.9
OpenSSF/OSV malware advisory MAL-2026-7206 blocks this version.
anguzarjs@8.7.6
OpenSSF/OSV malware advisory MAL-2026-7199 blocks this version.
anguyarjs@8.7.6
OpenSSF/OSV malware advisory MAL-2026-7198 blocks this version.