npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms @tvg-mar/promos-context@9.9.10 as malicious (MAL-2026-16412): Malicious code in @tvg-mar/promos-context (npm)

OpenSSF Malicious Packages via OSV confirms ubiquiti-agents-link-mcp@0.0.2 as malicious (MAL-2026-16409): Malicious code in ubiquiti-agents-link-mcp (npm)

OpenSSF Malicious Packages via OSV confirms ubiquiti-agents-link-mcp@0.0.1 as malicious (MAL-2026-16409): Malicious code in ubiquiti-agents-link-mcp (npm)

OpenSSF Malicious Packages via OSV confirms oracle-redis@5.11.3 as malicious (MAL-2026-16390): Malicious code in oracle-redis (npm)

OpenSSF Malicious Packages via OSV confirms noverojava@1.1.0 as malicious (MAL-2026-16389): Malicious code in noverojava (npm)

OpenSSF Malicious Packages via OSV confirms noverojava@1.0.9 as malicious (MAL-2026-16389): Malicious code in noverojava (npm)

OpenSSF Malicious Packages via OSV confirms @mr-supun-fernando/supunmd-bail@3.0.3 as malicious (MAL-2026-16387): Malicious code in @mr-supun-fernando/supunmd-bail (npm)

OpenSSF Malicious Packages via OSV confirms tlxbnhd@0.0.1 as malicious (MAL-2026-16385): Malicious code in tlxbnhd (npm)

OpenSSF Malicious Packages via OSV confirms tldriver@0.0.1 as malicious (MAL-2026-16384): Malicious code in tldriver (npm)

OpenSSF Malicious Packages via OSV confirms mxdriver@0.0.2 as malicious (MAL-2026-16383): Malicious code in mxdriver (npm)

OpenSSF Malicious Packages via OSV confirms mxdriver@0.0.1 as malicious (MAL-2026-16383): Malicious code in mxdriver (npm)

OpenSSF Malicious Packages via OSV confirms cisco-github-simple@1.0.1 as malicious (MAL-2026-16381): Malicious code in cisco-github-simple (npm)

OpenSSF Malicious Packages via OSV confirms chai-logger@3.0.2 as malicious (MAL-2026-16380): Malicious code in chai-logger (npm)

The package is an obfuscated, remotely directed browser redirector presented as a security challenge. This is concrete deceptive traffic-routing behavior, not a package-aligned application.

The package actively implements concealed, challenge-gated remote redirection in its only payload. Its opaque implementation and lack of legitimate package behavior support blocking it as...

The package contains an automatic lifecycle hook that implements remote interactive command execution. This is malicious install-hook abuse.

The package contains a preinstall hook that executes a shell-based external request. This is concrete install-hook abuse with no package functionality supporting it.

The package's only entrypoint is a heavily obfuscated challenge-and-redirect page with a concealed remote host resolution flow. Its random package identity and lack of legitimate library...

The package contains a concealed browser-redirect mechanism behind a challenge-themed page, which is concrete deceptive behavior. Although it has no install hook, the active entrypoint is...

The package implements an automatic install-time reconnaissance and external callback chain. Its research labels do not establish consent for this behavior.