Loading npm security reports…
Skip to main contentMalware2026-09-24 09:30Malware2026-09-24 09:30Malware2026-09-24 09:30Malware
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 51
Updated 9 Oct 2026, 20:07 UTC. Ordered by latest scan.
@larocas-bbresearch/tp-probe-e29834ce@1.0.0
OpenSSF Malicious Packages via OSV confirms @larocas-bbresearch/tp-probe-e29834ce@1.0.0 as malicious (MAL-2026-16529): Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)
@larocas-bbresearch/tp-probe-dc7a3670@1.0.0
OpenSSF Malicious Packages via OSV confirms @larocas-bbresearch/tp-probe-dc7a3670@1.0.0 as malicious (MAL-2026-16528): Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)
@larocas-bbresearch/tombstone-probe-8ejnsa@0.0.1
OpenSSF Malicious Packages via OSV confirms @larocas-bbresearch/tombstone-probe-8ejnsa@0.0.1 as malicious (MAL-2026-16525): Malicious code in @larocas-bbresearch/tombstone-probe-8ejnsa (npm)
@larocas-bbresearch/tombstone-probe-live-z6xz56@0.0.1
OpenSSF Malicious Packages via OSV confirms @larocas-bbresearch/tombstone-probe-live-z6xz56@0.0.1 as malicious (MAL-2026-16526): Malicious code in @larocas-bbresearch/tombstone-probe-live...