npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-4699 blocks this version. Package metadata advertises 'utility mf' with main 'index.js', but the shipped main is a 15.7MB obfuscator.io-style blob pr...

OpenSSF/OSV malware advisory MAL-2026-4621 blocks this version. nolimit-x ships an entirely obfuscator.io-packed runtime (45 files under.ad/, including the x0.js entrypoint) with no reada...

OpenSSF/OSV malware advisory MAL-2026-5237 blocks this version. No concrete installer-harm signals were identified in this package version. The package name suggests a MongoDB-related asy...

OpenSSF/OSV malware advisory MAL-2026-5238 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5237 blocks this version. No concrete installer-harm signals were identified in this package version. The package name suggests a MongoDB-related asy...

OpenSSF/OSV malware advisory MAL-2026-5238 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5236 blocks this version. No concrete installer-harm signals were identified in this package version. The package name combines 'awaitly' and 'libsql...

OpenSSF/OSV malware advisory MAL-2026-5230 blocks this version. No concrete installer-harm signals were identified in this version of autotel-subscribers. There is no observed lifecycle s...

OpenSSF/OSV malware advisory MAL-2026-5239 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5238 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5237 blocks this version. No concrete installer-harm signals were identified in this package version. The package name suggests a MongoDB-related asy...

OpenSSF/OSV malware advisory MAL-2026-5236 blocks this version. No concrete installer-harm signals were identified in this package version. The package name combines 'awaitly' and 'libsql...

OpenSSF/OSV malware advisory MAL-2026-5230 blocks this version. No concrete installer-harm signals were identified in this version of autotel-subscribers. There is no observed lifecycle s...

OpenSSF/OSV malware advisory MAL-2026-5230 blocks this version. No concrete installer-harm signals were identified in this version of autotel-subscribers. There is no observed lifecycle s...

OpenSSF/OSV malware advisory MAL-2026-5239 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5238 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5236 blocks this version. No concrete installer-harm signals were identified in this package version. The package name combines 'awaitly' and 'libsql...

OpenSSF/OSV malware advisory MAL-2026-5237 blocks this version. No concrete installer-harm signals were identified in this package version. The package name suggests a MongoDB-related asy...

OpenSSF/OSV malware advisory MAL-2026-5230 blocks this version. No concrete installer-harm signals were identified in this version of autotel-subscribers. There is no observed lifecycle s...

OpenSSF/OSV malware advisory MAL-2026-5239 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code