npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 637
Updated 25 Oct 2026, 23:13 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-3445 blocks this version. The package @squawk/geo was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3444 blocks this version. The package @squawk/flightplan was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3444 blocks this version. The package @squawk/flightplan was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3444 blocks this version. The package @squawk/flightplan was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3444 blocks this version. The package @squawk/flightplan was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3444 blocks this version. The package @squawk/flightplan was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3443 blocks this version. The package @squawk/flight-math was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3443 blocks this version. The package @squawk/flight-math was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3443 blocks this version. The package @squawk/flight-math was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3443 blocks this version. The package @squawk/flight-math was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3443 blocks this version. The package @squawk/flight-math was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3442 blocks this version. The package @squawk/fixes was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3442 blocks this version. The package @squawk/fixes was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3442 blocks this version. The package @squawk/fixes was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3442 blocks this version. The package @squawk/fixes was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3442 blocks this version. The package @squawk/fixes was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3441 blocks this version. The package @squawk/fix-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3441 blocks this version. The package @squawk/fix-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3441 blocks this version. The package @squawk/fix-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3441 blocks this version. The package @squawk/fix-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3441 blocks this version. The package @squawk/fix-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3438 blocks this version. The package @squawk/airspace-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3438 blocks this version. The package @squawk/airspace-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3438 blocks this version. The package @squawk/airspace-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3438 blocks this version. The package @squawk/airspace-data was found to contain malicious code.