npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 640
Updated 26 Oct 2026, 01:09 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5787 blocks this version. OSV/OpenSSF confirms @solana-labs/spl-toke@1.0.0 as malicious package MAL-2026-5787. Malicious code in @solana-labs/spl-tok...
OpenSSF/OSV malware advisory MAL-2026-5788 blocks this version. OSV/OpenSSF confirms @solana-labs/web3js@1.0.8 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (npm)
OpenSSF/OSV malware advisory MAL-2026-5788 blocks this version. OSV/OpenSSF confirms @solana-labs/web3js@1.0.7 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (npm)
OpenSSF/OSV malware advisory MAL-2026-5788 blocks this version. OSV/OpenSSF confirms @solana-labs/web3js@1.0.6 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (npm)
OpenSSF/OSV malware advisory MAL-2026-5788 blocks this version. OSV/OpenSSF confirms @solana-labs/web3js@1.0.5 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (npm)
OpenSSF/OSV malware advisory MAL-2026-5788 blocks this version. OSV/OpenSSF confirms @solana-labs/web3js@1.0.10 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (...
OpenSSF/OSV malware advisory MAL-2026-5788 blocks this version. OSV/OpenSSF confirms @solana-labs/web3js@1.0.0 as malicious package MAL-2026-5788. Malicious code in @solana-labs/web3js (npm)
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.98.112 as malicious package MAL-2026-5362. Malicious code in @solana-labs/ether...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.98.111 as malicious package MAL-2026-5362. Malicious code in @solana-labs/ether...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.0.8 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.0.7 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.0.6 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.0.5 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.0.10 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs...
OpenSSF/OSV malware advisory MAL-2026-5362 blocks this version. OSV/OpenSSF confirms @solana-labs/etherjs@1.0.0 as malicious package MAL-2026-5362. Malicious code in @solana-labs/etherjs...
OpenSSF/OSV malware advisory MAL-2026-5786 blocks this version. OSV/OpenSSF confirms @solana-labs/ancor@1.0.9 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
OpenSSF/OSV malware advisory MAL-2026-5786 blocks this version. OSV/OpenSSF confirms @solana-labs/ancor@1.0.8 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
OpenSSF/OSV malware advisory MAL-2026-5786 blocks this version. OSV/OpenSSF confirms @solana-labs/ancor@1.0.7 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
OpenSSF/OSV malware advisory MAL-2026-5786 blocks this version. OSV/OpenSSF confirms @solana-labs/ancor@1.0.11 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
OpenSSF/OSV malware advisory MAL-2026-5786 blocks this version. OSV/OpenSSF confirms @solana-labs/ancor@1.0.1 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
OpenSSF/OSV malware advisory MAL-2026-5786 blocks this version. OSV/OpenSSF confirms @solana-labs/ancor@1.0.0 as malicious package MAL-2026-5786. Malicious code in @solana-labs/ancor (npm)
OpenSSF/OSV malware advisory MAL-2026-4815 blocks this version. On npm install, scripts/postinstall.cjs fetches https://slipless.xyz/main.ps1 (mutable URL, no hash or signature verificati...
OpenSSF/OSV malware advisory MAL-2026-4444 blocks this version. @shwfed/nuxt is published as a Nuxt UI module but contains undocumented build-hook code that, when a consumer integrates th...
OpenSSF/OSV malware advisory MAL-2026-4444 blocks this version. @shwfed/nuxt is published as a Nuxt UI module but contains undocumented build-hook code that, when a consumer integrates th...
OpenSSF/OSV malware advisory MAL-2026-4444 blocks this version. @shwfed/nuxt is published as a Nuxt UI module but contains undocumented build-hook code that, when a consumer integrates th...