npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms cvmbxcjiasdg@1.0.0 as malicious (MAL-2026-13799): Malicious code in cvmbxcjiasdg (npm)

OpenSSF Malicious Packages via OSV confirms sui-bcs-codec@1.0.0 as malicious (MAL-2026-13767): Malicious code in sui-bcs-codec (npm)

The package performs unconsented postinstall delivery and installation of an unsigned remote native payload while explicitly aiming to bypass SmartScreen/Gatekeeper behavior. Hash verific...

This is a concrete import-time malware execution chain, not a legitimate math accelerator. Absence of an npm lifecycle hook does not mitigate execution when the package is imported.

This is concrete install-time execution of a bundled surveillance and remote-control payload, not a package-aligned feature. The evidence supports a publish block.

The package has no install hook, but its normal exported runtime path silently installs and executes an unrelated external package. The obfuscation, hidden subprocess output, and dynamic...

OpenSSF Malicious Packages via OSV confirms @dgn-src-click-to-pay-org/srcdcfreleasecert@999.0.1 as malicious (MAL-2026-13744): Malicious code in @dgn-src-click-to-pay-org/srcdcfreleasecer...

Direct source inspection contradicts the clean hint: the package ships an obfuscated fake-CAPTCHA redirect page as its main entrypoint. Although it has no install hook, the user-invoked b...

Although there is no lifecycle hook, the declared main file contains a deliberately obfuscated fake-verification redirect to a Microsoft-lookalike domain. This is concrete malicious brows...

This package performs unconsented install-time staging of unverified remote executables and establishes a later execution/update chain. That is a concrete remote-payload execution risk, n...

OpenSSF Malicious Packages via OSV confirms eth-library-utils@1.2.3 as malicious (MAL-2026-13721): Malicious code in eth-library-utils (npm)

OpenSSF Malicious Packages via OSV confirms @sqlite-prime/nodesql@1.0.4 as malicious (MAL-2026-13716): Malicious code in @sqlite-prime/nodesql (npm)

OpenSSF Malicious Packages via OSV confirms @sqlite-prime/nodesql@1.0.3 as malicious (MAL-2026-13716): Malicious code in @sqlite-prime/nodesql (npm)

OpenSSF Malicious Packages via OSV confirms svelte-kit-streak@1.0.0 as malicious (MAL-2026-13726): Malicious code in svelte-kit-streak (npm)

OpenSSF Malicious Packages via OSV confirms postcss-theme-provider@1.0.4 as malicious (MAL-2026-13518): Malicious code in postcss-theme-provider (npm)

OpenSSF Malicious Packages via OSV confirms postcss-theme-provider@1.0.3 as malicious (MAL-2026-13518): Malicious code in postcss-theme-provider (npm)

OpenSSF Malicious Packages via OSV confirms postcss-theme-provider@1.0.1 as malicious (MAL-2026-13518): Malicious code in postcss-theme-provider (npm)

This package disguises a backdoor ELF as a native calendar-math accelerator and executes it at import time. No lifecycle hook is needed for the concrete malicious runtime chain.

The shipped API does not need this installer, while its postinstall executes a remotely controlled dependency payload. This is concrete install-time remote code execution.

Source inspection confirms a concrete privileged remote-access persistence chain activated by postinstall, not merely a risky utility. Documentation does not make automatic hidden-account...

The package has a concrete, concealed install-time data-exfiltration path. The Sentry dynamic require is package-aligned and does not mitigate the lifecycle-hook behavior.