npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 620
Updated 25 Oct 2026, 11:11 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-4202 blocks this version. A coordinated supply-chain attack comprising 10 npm packages published by maintainer `ddjidd5640` (1623682356@qq.com) withi...
OpenSSF/OSV malware advisory MAL-2026-5907 blocks this version. OSV/OpenSSF confirms chai-solidity-testkit@1.6.4 as malicious package MAL-2026-5907. Malicious code in chai-solidity-testki...
OpenSSF/OSV malware advisory MAL-2026-5907 blocks this version. OSV/OpenSSF confirms chai-solidity-testkit@1.6.1 as malicious package MAL-2026-5907. Malicious code in chai-solidity-testki...
OpenSSF/OSV malware advisory MAL-2026-5905 blocks this version. OSV/OpenSSF confirms chai-plugin-helper@1.7.6 as malicious package MAL-2026-5905. Malicious code in chai-plugin-helper (npm)
OpenSSF/OSV malware advisory MAL-2026-5905 blocks this version. OSV/OpenSSF confirms chai-plugin-helper@1.7.5 as malicious package MAL-2026-5905. Malicious code in chai-plugin-helper (npm)
OpenSSF/OSV malware advisory MAL-2026-5905 blocks this version. OSV/OpenSSF confirms chai-plugin-helper@1.7.4 as malicious package MAL-2026-5905. Malicious code in chai-plugin-helper (npm)
OpenSSF/OSV malware advisory MAL-2026-5905 blocks this version. OSV/OpenSSF confirms chai-plugin-helper@1.7.3 as malicious package MAL-2026-5905. Malicious code in chai-plugin-helper (npm)
OpenSSF/OSV malware advisory MAL-2026-5906 blocks this version. OSV/OpenSSF confirms chai-plugin-kit@5.8.1 as malicious package MAL-2026-5906. Malicious code in chai-plugin-kit (npm)
OpenSSF/OSV malware advisory MAL-2026-5904 blocks this version. OSV/OpenSSF confirms chai-plugin@4.5.5 as malicious package MAL-2026-5904. Malicious code in chai-plugin (npm)
OpenSSF/OSV malware advisory MAL-2026-5904 blocks this version. OSV/OpenSSF confirms chai-plugin@4.5.4 as malicious package MAL-2026-5904. Malicious code in chai-plugin (npm)
OpenSSF/OSV malware advisory MAL-2026-5904 blocks this version. OSV/OpenSSF confirms chai-plugin@4.5.3 as malicious package MAL-2026-5904. Malicious code in chai-plugin (npm)
OpenSSF/OSV malware advisory MAL-2026-5904 blocks this version. OSV/OpenSSF confirms chai-plugin@4.5.2 as malicious package MAL-2026-5904. Malicious code in chai-plugin (npm)
OpenSSF/OSV malware advisory MAL-2026-5607 blocks this version. OSV/OpenSSF confirms chai-net-test@1.1.3 as malicious package MAL-2026-5607. Malicious code in chai-net-test (npm)
OpenSSF/OSV malware advisory MAL-2026-5607 blocks this version. OSV/OpenSSF confirms chai-net-test@1.1.2 as malicious package MAL-2026-5607. Malicious code in chai-net-test (npm)
OpenSSF/OSV malware advisory MAL-2026-5607 blocks this version. OSV/OpenSSF confirms chai-net-test@1.1.0 as malicious package MAL-2026-5607. Malicious code in chai-net-test (npm)
OpenSSF/OSV malware advisory MAL-2026-5306 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-5903 blocks this version. OSV/OpenSSF confirms chai-guid@1.1.5 as malicious package MAL-2026-5903. Malicious code in chai-guid (npm)