Loading npm security reports…
Skip to main contentMalware2026-07-08 23:55Malware2026-07-08 23:55Malware2026-07-08 23:55Malware2026-07-08 23:55
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 475
Updated 21 Oct 2026, 15:33 UTC. Ordered by latest scan.
maplibre-gl-vue3@5.24.1
OpenSSF/OSV malware advisory MAL-2026-6592 blocks this version. The package advertises itself as MapLibre GL bindings for Vue 3 and re-exports the upstream maplibre-gl API, but on import...
ulid-xyz@3.2.4
OpenSSF/OSV malware advisory MAL-2026-6672 blocks this version. ulid-xyz is a typosquat of the popular ulid library (sortable unique IDs) and is a cross-platform Remote Access Trojan deli...
ulid-xyz@3.2.3
OpenSSF/OSV malware advisory MAL-2026-6672 blocks this version. ulid-xyz is a typosquat of the popular ulid library (sortable unique IDs) and is a cross-platform Remote Access Trojan deli...
loadutils@1.0.6
OpenSSF/OSV malware advisory MAL-2026-6580 blocks this version. Package `loadutils` is a typosquat of the widely-used webpack helper `loader-utils`. The shipped README documents the loade...