npm malware reports, with evidence.

Source establishes a concrete, automatic, unauthorized account mutation on the ordinary runtime path, with a remotely controllable target list. The benign preinstall version check does no...

Source inspection confirms concrete install-time collection and local persistence rather than a scanner-only match. The absence of networking limits impact but does not remove the unconse...

Source inspection confirms a postinstall side effect that collects local metadata and writes it outside the package, aligned with the package's dependency-confusion PoC description. Absen...

Direct inspection confirms an automatic postinstall collector and file write; the benign runtime entrypoint does not mitigate that install-time behavior. No network transmission was found.

Source inspection confirms the lifecycle payload and its local metadata collection/write behavior. The benign runtime entrypoint does not mitigate the install-time action.

This is not a benign logger/middleware implementation: its entrypoint activates an opaque payload with credential-targeting, networking, and execution capabilities. The lack of an install...

This is concrete concealed malware executed at import time, unrelated to calendar/streak functionality. Absence of npm lifecycle hooks does not mitigate the runtime dropper.

The automatic import-time binary drop-and-execute chain is concrete malware behavior unrelated to streak calculations. Absence of npm lifecycle hooks does not mitigate runtime compromise.

Source inspection confirms a concrete, automatic native payload drop-and-execute chain in the default import path. The absence of an npm lifecycle hook does not mitigate import-time execu...

Direct source inspection confirms immediate, concealed navigation behavior with a dynamically selected external host and no color-related implementation. This is concrete malicious runtim...

The package has no legitimate color-related behavior; its sole runtime payload performs covert parent-frame navigation and disruption. This is concrete malicious browser behavior, not a s...

The package uses an import-time side effect to execute a bundled Windows remote-control agent. Its capture, command, persistence, and network capabilities establish concrete malicious beh...

The runtime import chain silently executes a bundled Windows binary whose static contents indicate remote command capability and persistence. The absence of an npm install hook does not m...

OpenSSF Malicious Packages via OSV confirms @wagni_bot/polymarket-sdk@1.1.2 as malicious (MAL-2026-10033): Malicious code in @wagni_bot/polymarket-sdk (npm)

OpenSSF Malicious Packages via OSV confirms @wagni_bot/eth-agent@1.1.2 as malicious (MAL-2026-10024): Malicious code in @wagni_bot/eth-agent (npm)

Source inspection confirms concrete, obfuscated third-party license/beacon and overlay injection into consumer build artifacts, unrelated to the declared SVG utility. No lifecycle hook is...

This is a concrete unverified remote payload chain activated by npm postinstall, not merely a normal packaged optional dependency. The fixed IP endpoint and disabled TLS validation make t...

The import-time obfuscated installer creates a concrete remote-payload and persistence chain. Absence of an npm lifecycle hook does not mitigate execution when consumers import the defaul...

The observed top-level, obfuscated installation and execution of an unrelated remote package is concrete unconsented staged code execution, not required polyfill functionality.

The public calendar helpers conceal an import-triggered downloader and Windows persistence routine unrelated to package functionality. This is malicious behavior despite a likely implemen...

The native addon’s imported APIs and embedded anti-analysis/staging indicators are materially inconsistent with a buffer utility. The absence of install hooks does not mitigate import-tim...