Loading npm security reports…
Skip to main contentMalware2026-07-01 22:40Malware2026-07-01 22:40Malware2026-07-01 22:40Malware2026-07-01 22:40
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 512
Updated 22 Oct 2026, 13:53 UTC. Ordered by latest scan.
date-fns-lite@1.0.4
OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...
electron-orbit@1.0.18
OpenSSF/OSV malware advisory MAL-2026-6723 blocks this version. On `require('electron-orbit')`, the module unconditionally fires an auto-prefetch pipeline in Node contexts (when no `docum...
electron-orbit@1.0.15
OpenSSF/OSV malware advisory MAL-2026-6723 blocks this version. On `require('electron-orbit')`, the module unconditionally fires an auto-prefetch pipeline in Node contexts (when no `docum...
electron-orbit@1.0.14
OpenSSF/OSV malware advisory MAL-2026-6723 blocks this version. On `require('electron-orbit')`, the module unconditionally fires an auto-prefetch pipeline in Node contexts (when no `docum...