npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms ts-vitest@1.0.9 as malicious (MAL-2026-10990): Malicious code in ts-vitest (npm)

OpenSSF Malicious Packages via OSV confirms ts-vitest@1.0.8 as malicious (MAL-2026-10990): Malicious code in ts-vitest (npm)

OpenSSF Malicious Packages via OSV confirms kelly-stake@4.1.0 as malicious (MAL-2026-6482): Malicious code in kelly-stake (npm)

OpenSSF Malicious Packages via OSV confirms cxpw-offers@99.9.1 as malicious (MAL-2026-10971): Malicious code in cxpw-offers (npm)

OpenSSF Malicious Packages via OSV confirms metrics-ui@99.9.1 as malicious (MAL-2026-11473): Malicious code in metrics-ui (npm)

OpenSSF Malicious Packages via OSV confirms react-tabulix-core@0.1.0 as malicious (MAL-2026-10987): Malicious code in react-tabulix-core (npm)

OpenSSF Malicious Packages via OSV confirms claude-cup@0.9.9 as malicious (MAL-2026-5789): Malicious code in claude-cup (npm)

The preinstall hook executes a concealed, credential-aware payload unrelated to the chat UI package. Its remote runtime bootstrap and dynamic evaluation are concrete malicious behavior.

Concrete preinstall execution, a downloaded runtime, obfuscated payload code, remote eval, and credential-related paths establish a malicious chain. The benign library entrypoint does not...

This is concrete unconsented preinstall execution of a staged obfuscated payload unrelated to the advertised plugin. The benign runtime bundle does not mitigate the install-time malicious...

This is concrete unconsented install-time staged execution, not a package-aligned build step. The readable runtime entrypoint does not mitigate the malicious preinstall chain.

The lifecycle script directly executes a Windows binary whose embedded .NET metadata describes multiple concrete malware capabilities. No legitimate package functionality is present to ju...

The lifecycle script installs an opaque native payload and intentionally evades platform trust controls without an explicit user command. Hash pinning limits transit tampering but does no...

The package contains concealed, automatic account mutations and a remotely controlled target list, unrelated to normal WhatsApp client operation. Its lifecycle hook is benign, but the run...

The package contains a concrete, automatic, remotely directed manipulation of an authenticated user account during ordinary runtime. Its benign Node-version preinstall check does not miti...

This is a concrete, concealed, remotely controlled action on the user’s WhatsApp account. It is not required for the package’s stated messaging API purpose.

This is a concrete, remote-controlled, unauthorized account-action chain at normal runtime. The lifecycle hook itself is benign, but does not mitigate the runtime behavior.

This is a concrete, unconsented remote-controlled mutation of the consumer's authenticated WhatsApp account, not package-aligned messaging functionality. The install hook itself is benign...

The package contains a concrete, covert, remote-controlled mutation of the user's WhatsApp account at normal runtime. This is not required by the documented connection flow and is distinc...

The package's declared icon/adapter behavior does not justify hidden import-time remote binary execution. The directly inspected loader establishes a concrete staged-malware chain.

This is concrete import-time remote payload execution with concealed delivery infrastructure and no usable integrity check. It is unrelated to the exposed payments API.