npm malware reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-5247 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5248 blocks this version. No concrete installer-harm signals were identified in this package version. No lifecycle scripts, hardcoded network destina...

OpenSSF/OSV malware advisory MAL-2026-5256 blocks this version. No concrete installer-harm signals were identified in this version. No lifecycle hooks fetching remote payloads, no credent...

OpenSSF/OSV malware advisory MAL-2026-5249 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5250 blocks this version. No concrete installer-harm evidence was identified in this version of executable-stories-cypress. No lifecycle hook payload...

OpenSSF/OSV malware advisory MAL-2026-5254 blocks this version. No concrete installer-harm signals were identified for this package version. No lifecycle scripts, hardcoded network destin...

OpenSSF/OSV malware advisory MAL-2026-5226 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5225 blocks this version. No concrete installer-harm evidence was identified in this version of autotel-mongoose. The package name resembles the popu...

OpenSSF/OSV malware advisory MAL-2026-5186 blocks this version. The package ships a bundled CLI (dist/cli.cjs and dist/cli.js) in which base64 decoding primitives (Buffer.from(..., 'base6...

OpenSSF/OSV malware advisory MAL-2026-5223 blocks this version. Pattern-based matches fired on the strings 'ping' and 'POST' co-occurring in the package's bundled output (dist/index.cjs,...

OpenSSF/OSV malware advisory MAL-2026-5245 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5258 blocks this version. No concrete installer-harm indicators were identified in this package version. No lifecycle-script behavior, network beacon...

OpenSSF/OSV malware advisory MAL-2026-5221 blocks this version. No concrete installer-harm evidence was identified for this package version. No lifecycle-script droppers, credential reads...

OpenSSF/OSV malware advisory MAL-2026-5247 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-5218 blocks this version. autotel-devtools ships bundled CommonJS and ESM artifacts (dist/cli.cjs, dist/cli.js, dist/index.cjs, dist/index.js, dist/s...

OpenSSF/OSV malware advisory MAL-2026-5248 blocks this version. No concrete installer-harm signals were identified in this package version. No lifecycle scripts, hardcoded network destina...

OpenSSF/OSV malware advisory MAL-2026-5252 blocks this version. No concrete installer-harm indicators were identified in this version of the package. No lifecycle hooks, hardcoded network...

OpenSSF/OSV malware advisory MAL-2026-5224 blocks this version. No concrete installer-harm signals were identified for this package version. No lifecycle hooks, network destinations, cred...

OpenSSF/OSV malware advisory MAL-2026-5256 blocks this version. No concrete installer-harm signals were identified in this version. No lifecycle hooks fetching remote payloads, no credent...

OpenSSF/OSV malware advisory MAL-2026-5225 blocks this version. No concrete installer-harm evidence was identified in this version of autotel-mongoose. The package name resembles the popu...

OpenSSF/OSV malware advisory MAL-2026-5260 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code