npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 638
Updated 25 Oct 2026, 23:44 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-3438 blocks this version. The package @squawk/airspace-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3437 blocks this version. The package @squawk/airspace was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3437 blocks this version. The package @squawk/airspace was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3437 blocks this version. The package @squawk/airspace was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3437 blocks this version. The package @squawk/airspace was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3437 blocks this version. The package @squawk/airspace was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3435 blocks this version. The package @squawk/airport-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3435 blocks this version. The package @squawk/airport-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3435 blocks this version. The package @squawk/airport-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3435 blocks this version. The package @squawk/airport-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3435 blocks this version. The package @squawk/airport-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3436 blocks this version. The package @squawk/airports was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3436 blocks this version. The package @squawk/airports was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3436 blocks this version. The package @squawk/airports was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3436 blocks this version. The package @squawk/airports was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3436 blocks this version. The package @squawk/airports was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3440 blocks this version. The package @squawk/airways was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3440 blocks this version. The package @squawk/airways was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3440 blocks this version. The package @squawk/airways was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3440 blocks this version. The package @squawk/airways was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3440 blocks this version. The package @squawk/airways was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3439 blocks this version. The package @squawk/airway-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3439 blocks this version. The package @squawk/airway-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3439 blocks this version. The package @squawk/airway-data was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3439 blocks this version. The package @squawk/airway-data was found to contain malicious code.