npm malware reports, with evidence.

Source inspection confirms deliberate third-party protected-process targeting, DLL injection, masquerading, and persistence. The lack of install-time execution does not negate the concret...

OpenSSF Malicious Packages via OSV confirms relativity-pdfjs-dist@5.8.2 as malicious (MAL-2026-10778): Malicious code in relativity-pdfjs-dist (npm)

Source establishes a concrete covert assessment-cheating and proctor-evasion workflow with persistence, not a benign DOM utility. The unused browser-cookie helper further raises risk, whi...

The package contains concrete import-time arbitrary payload execution in its published Node entrypoints. The behavior is concealed in build artifacts and is unrelated to the library's blo...

The package's real export path introduces obfuscated system reconnaissance and remote-capable execution primitives that are not required for Chai assertions. This is malicious import-time...

The package contains an undocumented, unconditionally triggered detached subprocess and database-connection payload unrelated to its stated testing utility. This is concrete malicious run...

OpenSSF Malicious Packages via OSV confirms px8my@1.0.40 as malicious (MAL-2026-10104): Malicious code in px8my (npm)

This is concrete browser page hijacking and remote payload delivery, not an inert helper or benign dependency behavior.

OpenSSF Malicious Packages via OSV confirms phantomx-tool-client@1.0.8 as malicious (MAL-2026-10745): Malicious code in phantomx-tool-client (npm)

OpenSSF Malicious Packages via OSV confirms @vibelet/cli@1.2.154 as malicious (MAL-2026-10720): Malicious code in @vibelet/cli (npm)

OpenSSF Malicious Packages via OSV confirms @onescience/onecode@1.14.50-202607161710 as malicious (MAL-2026-10717): Malicious code in @onescience/onecode (npm)

OpenSSF Malicious Packages via OSV confirms @agent-link/agent@0.1.269 as malicious (MAL-2026-10705): Malicious code in @agent-link/agent (npm)

Source inspection confirms a concrete browser UI-hijacking and remotely controlled content-delivery chain. Although it has no install hook or local credential theft, the behavior is not c...

Source and shipped bundles establish a concrete GET-triggered remote-download-and-write chain. The absence of install hooks does not mitigate this runtime malware behavior.

Source inspection confirms a concrete runtime remote-download-and-write chain, not merely a scanner similarity signal. The absence of lifecycle hooks does not mitigate the malicious behav...

Source inspection confirms concrete remote download-and-drop behavior unrelated to the package’s metrics API. Lack of lifecycle hooks limits activation to an explicit runtime call but doe...

Direct source inspection confirms an unsolicited install-time external network request. The package contains no legitimate implementation that would justify this behavior.

Source inspection confirms a concrete remote-content takeover on import, not merely a shell helper or scanner heuristic. This is a staged payload carrier whose destination can be rotated...

Concrete install-time execution performs credential/config exfiltration and remote SSH persistence. This is direct malicious behavior, not a package-aligned feature.

OpenSSF Malicious Packages via OSV confirms miguelphonk@2.0.0 as malicious (MAL-2026-10335): Malicious code in miguelphonk (npm)

The package contains concrete, reachable malicious document-content injection in both published runtime entrypoints. No install hook is needed for the payload to affect users processing O...