npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 605
Updated 25 Oct 2026, 01:29 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-5742 blocks this version. axl-ui@9.9.99 is a dependency-confusion squat targeting an internal package name. package.json declares a postinstall hook...
OpenSSF/OSV malware advisory MAL-2026-3078 blocks this version. The package axis-notification was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3078 blocks this version. The package axis-notification was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3078 blocks this version. The package axis-notification was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3076 blocks this version. The package axis-abc-search-address was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3076 blocks this version. The package axis-abc-search-address was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3076 blocks this version. The package axis-abc-search-address was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3075 blocks this version. The package axis-abc-search-account was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3075 blocks this version. The package axis-abc-search-account was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3075 blocks this version. The package axis-abc-search-account was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-3187 blocks this version. The package apple-appstore-full-library-utility was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3151 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...
OpenSSF/OSV malware advisory MAL-2026-3150 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...
OpenSSF/OSV malware advisory MAL-2026-3152 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...
OpenSSF/OSV malware advisory MAL-2026-3162 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...
OpenSSF/OSV malware advisory MAL-2026-3188 blocks this version. The package apple-security-internal-scanner-v3 was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3416 blocks this version. The package apple-mycelium-fix was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3416 blocks this version. The package apple-mycelium-fix was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3153 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...
OpenSSF/OSV malware advisory MAL-2026-3154 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...