Loading npm security reports…
Skip to main contentMalware2026-07-08 22:15Malware2026-07-08 22:15Malware2026-07-08 22:15Malware2026-07-08 22:15
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 481
Updated 21 Oct 2026, 19:38 UTC. Ordered by latest scan.
redis-xyz@1.1.4
OpenSSF/OSV malware advisory MAL-2026-5883 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
@sql-access/nodesql@1.0.0
OpenSSF/OSV malware advisory MAL-2026-5394 blocks this version. @sql-access/nodesql@1.1.3 is a decoy package whose identity, README, and code do not match. The package name and keywords a...
kecak256@1.0.2
OpenSSF/OSV malware advisory MAL-2026-5342 blocks this version. `kecak256` is a typosquat of the popular `keccak256` package (one `c` dropped) that ships a credential-stealing payload exe...
intquery@1.1.4
OpenSSF/OSV malware advisory MAL-2026-6113 blocks this version. intquery@1.1.5 is published under the name 'intquery' by 'Stagnation Lab', but its README is a verbatim copy of the unrelat...