Loading npm security reports…
Skip to main contentMalware3 days ago 16:35Malware3 days ago 13:50Malware3 days ago 04:20Malware3 days ago 04:20Malware
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 7
Updated 8 Oct 2026, 12:33 UTC. Ordered by latest scan.
with-cte@1.0.0
OpenSSF Malicious Packages via OSV confirms with-cte@1.0.0 as malicious (MAL-2026-17579): Malicious code in with-cte (npm)
@subql/common@5.8.3
OpenSSF Malicious Packages via OSV confirms @subql/common@5.8.3 as malicious (MAL-2026-17571): Malicious code in @subql/common (npm)
ph-common@1.1.0
OpenSSF Malicious Packages via OSV confirms ph-common@1.1.0 as malicious (MAL-2026-1809): Malicious code in ph-common (npm)
ph-common@2.0.0
OpenSSF Malicious Packages via OSV confirms ph-common@2.0.0 as malicious (MAL-2026-1809): Malicious code in ph-common (npm)
ph-common@3.0.0
OpenSSF Malicious Packages via OSV confirms ph-common@3.0.0 as malicious (MAL-2026-1809): Malicious code in ph-common (npm)