Loading npm security reports…
Skip to main contentMalware2026-09-23 01:20Malware2026-09-23 01:05Malware2026-09-23 01:05Malware2026-09-22 23:35
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 68
Updated 10 Oct 2026, 08:42 UTC. Ordered by latest scan.
epic-alt-utils@1.4.15
OpenSSF Malicious Packages via OSV confirms epic-alt-utils@1.4.15 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)
evm-validation@1.0.4
OpenSSF Malicious Packages via OSV confirms evm-validation@1.0.4 as malicious (MAL-2026-14301): Malicious code in evm-validation (npm)
bigops-auth-interceptor@35.7.2
OpenSSF Malicious Packages via OSV confirms bigops-auth-interceptor@35.7.2 as malicious (MAL-2026-12151): Malicious code in bigops-auth-interceptor (npm)
@gsutevil/hta-stage@1.62.0
OpenSSF Malicious Packages via OSV confirms @gsutevil/hta-stage@1.62.0 as malicious (MAL-2026-16419): Malicious code in @gsutevil/hta-stage (npm)
@lekzo/baileys@0.0.7
