Loading npm security reports…
Skip to main contentMalware2026-06-30 15:00Malware2026-06-30 15:00Malware2026-06-30 15:00Malware2026-06-30 15:00
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 477
Updated 20 Oct 2026, 14:52 UTC. Ordered by latest scan.
ts-escro@0.0.8
OpenSSF/OSV malware advisory MAL-2026-6319 blocks this version. The package ships a verbatim copy of MikeMcl/big.js v7.0.1 (same banner, MIT copyright, and API) but is published under a d...
ts-escro@0.0.6
OpenSSF/OSV malware advisory MAL-2026-6319 blocks this version. The package ships a verbatim copy of MikeMcl/big.js v7.0.1 (same banner, MIT copyright, and API) but is published under a d...
textshape-css@1.0.0
OpenSSF/OSV malware advisory MAL-2026-6475 blocks this version. The package presents itself as a Tailwind CSS typography plugin (its name, description, and source tree clone @tailwindcss/...
new-ecro-1@0.3.9
OpenSSF/OSV malware advisory MAL-2026-6198 blocks this version. Package `new-ecro-1` impersonates the legitimate `big.js` library by shipping its source verbatim (banner, license, and hom...