npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. These reports have OSV or public advisory evidence. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 634
Updated 25 Oct 2026, 09:57 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-3776 blocks this version. The package impersonates the legitimate @tailwindcss/typography plugin: README, src/index.js, src/utils.js, and src/styles....
OpenSSF/OSV malware advisory MAL-2026-6297 blocks this version. Package is a dependency-confusion lure: it claims version 9999.99.99 with description 'npm 404 error referenced in Alexande...
OpenSSF/OSV malware advisory MAL-2026-3340 blocks this version. The package trevlo was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3340 blocks this version. The package trevlo was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3340 blocks this version. The package trevlo was found to contain malicious code.