Loading npm security reports…
Skip to main contentMalware2026-09-23 03:00Malware2026-09-23 02:10Malware2026-09-23 02:10Malware2026-09-23 02:10
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 63
Updated 10 Oct 2026, 05:12 UTC. Ordered by latest scan.
my-auto-follow@1.0.7
OpenSSF Malicious Packages via OSV confirms my-auto-follow@1.0.7 as malicious (MAL-2026-13932): Malicious code in my-auto-follow (npm)
faceplate-docs@99.9.10
OpenSSF Malicious Packages via OSV confirms faceplate-docs@99.9.10 as malicious (MAL-2024-2355): Malicious code in faceplate-docs (npm)
faceplate-docs@99.9.9
OpenSSF Malicious Packages via OSV confirms faceplate-docs@99.9.9 as malicious (MAL-2024-2355): Malicious code in faceplate-docs (npm)
eslint-plugin-i18n-shreddit@99.9.9
OpenSSF Malicious Packages via OSV confirms eslint-plugin-i18n-shreddit@99.9.9 as malicious (MAL-2026-16437): Malicious code in eslint-plugin-i18n-shreddit (npm)