Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 22 Oct 2026, 09:50 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-2881 blocks this version. big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft
OpenSSF/OSV malware advisory MAL-2026-2879 blocks this version. big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft
OpenSSF/OSV malware advisory MAL-2026-2881 blocks this version. big.js typosquat campaign - SSH backdoor implantation, credential and crypto wallet theft
OpenSSF/OSV malware advisory MAL-2026-6811 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-6817 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...