Loading npm security reports…
Skip to main contentMalware2026-09-24 09:30Malware2026-09-24 09:30Malware2026-09-24 09:30Malware2026-09-24 09:30
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 52
Updated 9 Oct 2026, 20:43 UTC. Ordered by latest scan.
@client-web-next/ui@9.999.2
OpenSSF Malicious Packages via OSV confirms @client-web-next/ui@9.999.2 as malicious (MAL-2026-16512): Malicious code in @client-web-next/ui (npm)
@yuva2210/poc-depconf@1.0.1
OpenSSF Malicious Packages via OSV confirms @yuva2210/poc-depconf@1.0.1 as malicious (MAL-2026-16532): Malicious code in @yuva2210/poc-depconf (npm)
@yuva2210/poc-depconf@1.0.0
OpenSSF Malicious Packages via OSV confirms @yuva2210/poc-depconf@1.0.0 as malicious (MAL-2026-16532): Malicious code in @yuva2210/poc-depconf (npm)
@yuva2210/okx-poc-preinstall@1.0.1
OpenSSF Malicious Packages via OSV confirms @yuva2210/okx-poc-preinstall@1.0.1 as malicious (MAL-2026-16531): Malicious code in @yuva2210/okx-poc-preinstall (npm)