npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 651
Updated 26 Oct 2026, 08:44 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-6528 blocks this version. The package ships a binding.gyp at the tarball root that contains GYP command-expansion syntax (<!(...) / <!@(...)) in its...
OpenSSF/OSV malware advisory MAL-2026-6528 blocks this version. The package ships a binding.gyp at the tarball root that contains GYP command-expansion syntax (<!(...) / <!@(...)) in its...
OpenSSF/OSV malware advisory MAL-2026-6528 blocks this version. The package ships a binding.gyp at the tarball root that contains GYP command-expansion syntax (<!(...) / <!@(...)) in its...
OpenSSF/OSV malware advisory MAL-2026-6528 blocks this version. The package ships a binding.gyp at the tarball root that contains GYP command-expansion syntax (<!(...) / <!@(...)) in its...
OpenSSF/OSV malware advisory MAL-2026-6527 blocks this version. The package ships a binding.gyp at the package root whose contents use GYP command-expansion syntax (`<!(...)`) inside its...
OpenSSF/OSV malware advisory MAL-2026-6527 blocks this version. The package ships a binding.gyp at the package root whose contents use GYP command-expansion syntax (`<!(...)`) inside its...
OpenSSF/OSV malware advisory MAL-2026-6527 blocks this version. The package ships a binding.gyp at the package root whose contents use GYP command-expansion syntax (`<!(...)`) inside its...
OpenSSF/OSV malware advisory MAL-2026-6527 blocks this version. The package ships a binding.gyp at the package root whose contents use GYP command-expansion syntax (`<!(...)`) inside its...
OpenSSF/OSV malware advisory MAL-2026-6527 blocks this version. The package ships a binding.gyp at the package root whose contents use GYP command-expansion syntax (`<!(...)`) inside its...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...
OpenSSF/OSV malware advisory MAL-2026-4394 blocks this version. @ikyyofc/gemini-cli@3.0.1 ships two heavily obfuscated modules (src/gemini.js and src/utils/proxy.js) wrapped in an obfusca...