Loading npm security reports…
Skip to main contentMalware2026-07-08 17:25Malware2026-07-08 17:25Malware2026-07-08 17:25Malware2026-07-08 17:25
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 491
Updated 22 Oct 2026, 01:42 UTC. Ordered by latest scan.
@k18n/creatormarketplace-admin-language@99.0.2
OpenSSF/OSV malware advisory MAL-2026-6550 blocks this version. Package claims the @k18n npm scope (used internally by Kuaishou) and publishes at version 99.0.0 — the canonical high-versi...
@k18n/creatormarketplace-admin-language@99.0.1
OpenSSF/OSV malware advisory MAL-2026-6550 blocks this version. Package claims the @k18n npm scope (used internally by Kuaishou) and publishes at version 99.0.0 — the canonical high-versi...
@k18n/creatormarketplace-admin-language@99.0.0
OpenSSF/OSV malware advisory MAL-2026-6550 blocks this version. Package claims the @k18n npm scope (used internally by Kuaishou) and publishes at version 99.0.0 — the canonical high-versi...
ec-checker@0.0.1
OpenSSF/OSV malware advisory MAL-2026-6996 blocks this version. package.json declares a preinstall script that runs `npm install @sentry/node && node examples/verify.js`. examples/verify....