npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 707
Updated 27 Oct 2026, 18:32 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.9 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.8 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.7 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.69 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.68 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.67 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.66 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.65 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.64 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.63 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.62 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.61 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.60 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.6 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.59 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.58 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.57 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.56 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.55 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.54 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.53 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.52 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.51 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.50 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.5 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)