npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 592
Updated 24 Oct 2026, 17:29 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-4132 blocks this version. Part of the **Mini Shai-Hulud** supply chain attack campaign in which a threat actor compromised the npm account `atool` an...
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.8 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.7 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.4 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.3 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.2 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.1 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5719 blocks this version. OSV/OpenSSF confirms ect-654321@100.0.0 as malicious package MAL-2026-5719. Malicious code in ect-654321 (npm)
OpenSSF/OSV malware advisory MAL-2026-5718 blocks this version. OSV/OpenSSF confirms ect-472839-ctf@1.0.0 as malicious package MAL-2026-5718. Malicious code in ect-472839-ctf (npm)
OpenSSF/OSV malware advisory MAL-2025-49282 blocks this version. OSV/OpenSSF confirms ect-472839@100.0.1 as malicious package MAL-2025-49282. Malicious code in ect-472839 (npm)
OpenSSF/OSV malware advisory MAL-2025-49282 blocks this version. OSV/OpenSSF confirms ect-472839@100.0.0 as malicious package MAL-2025-49282. Malicious code in ect-472839 (npm)
OpenSSF/OSV malware advisory MAL-2026-5721 blocks this version. OSV/OpenSSF confirms ect-839201-ctf@1.0.0 as malicious package MAL-2026-5721. Malicious code in ect-839201-ctf (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.9 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.8 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.7 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.6 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.5 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.4 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.3 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.2 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.10 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.1 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5720 blocks this version. OSV/OpenSSF confirms ect-839201@100.0.0 as malicious package MAL-2026-5720. Malicious code in ect-839201 (npm)
OpenSSF/OSV malware advisory MAL-2026-5690 blocks this version. OSV/OpenSSF confirms ecto-spectral-leak-8d4e2@1.0.2 as malicious package MAL-2026-5690. Malicious code in ecto-spectral-lea...
OpenSSF/OSV malware advisory MAL-2026-5690 blocks this version. OSV/OpenSSF confirms ecto-spectral-leak-8d4e2@1.0.1 as malicious package MAL-2026-5690. Malicious code in ecto-spectral-lea...