npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms ai-analyzer@1.0.15 as malicious (MAL-2026-13934): Malicious code in ai-analyzer (npm)

OpenSSF Malicious Packages via OSV confirms in-install@99.9.1 as malicious (MAL-2026-13982): Malicious code in in-install (npm)

OpenSSF Malicious Packages via OSV confirms knip-bun@99.9.1 as malicious (MAL-2026-13983): Malicious code in knip-bun (npm)

OpenSSF Malicious Packages via OSV confirms cspell-esm@99.9.1 as malicious (MAL-2026-13977): Malicious code in cspell-esm (npm)

OpenSSF Malicious Packages via OSV confirms resolve-audit@99.9.1 as malicious (MAL-2026-13987): Malicious code in resolve-audit (npm)

OpenSSF Malicious Packages via OSV confirms check-audit@99.9.1 as malicious (MAL-2026-13976): Malicious code in check-audit (npm)

OpenSSF Malicious Packages via OSV confirms eslint-publish-release@99.9.1 as malicious (MAL-2026-13981): Malicious code in eslint-publish-release (npm)

OpenSSF Malicious Packages via OSV confirms eslint-generate-release@99.9.1 as malicious (MAL-2026-13980): Malicious code in eslint-generate-release (npm)

OpenSSF Malicious Packages via OSV confirms eslint-generate-prerelease@99.9.1 as malicious (MAL-2026-13979): Malicious code in eslint-generate-prerelease (npm)

OpenSSF Malicious Packages via OSV confirms napi-raw@99.9.1 as malicious (MAL-2026-13984): Malicious code in napi-raw (npm)

OpenSSF Malicious Packages via OSV confirms @dgn-src-click-to-pay-org/srcdcfreleasecert@374.0.0 as malicious (MAL-2026-13744): Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecer...

OpenSSF Malicious Packages via OSV confirms nolimit-agent@1.0.343 as malicious (MAL-2026-12183): Malicious code in nolimit-agent (npm)

Source establishes a remote-controlled, automatic account-action chain that follows and mutes newsletters for a connected user. The install hook is benign, but does not mitigate this runt...

Source confirms a concrete, automatic, remotely controlled action on the user’s authenticated WhatsApp account. The install hook itself is benign, but does not mitigate the runtime payload.

This is a concrete, remotely controlled and unconsented account-action chain in the default runtime path. The install hook itself is benign, but it does not mitigate the runtime behavior.

The source contains a concrete, automatic and remotely directed modification of a user's WhatsApp account rather than a package-aligned feature invoked by the caller. The install hook is...

This is concrete, automatic remote-controlled mutation of a user’s WhatsApp account, unrelated to the requested socket connection. The install hook is benign, but does not mitigate the ru...

The automatic remote-controlled modification of a user's WhatsApp account is concrete unauthorized behavior. The lifecycle hook itself is benign, but it does not mitigate the runtime payl...

The package performs concrete privileged persistence and weakens remote-access controls automatically during npm installation. This is malicious behavior, not a benign installer primitive.

The package exports a bundle containing targeted, automatically activated page disruption and external audio playback. Absence of install hooks does not mitigate the runtime attack behavior.

OpenSSF Malicious Packages via OSV confirms svelte-vim-kit@1.0.0 as malicious (MAL-2026-13769): Malicious code in svelte-vim-kit (npm)