npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 708
Updated 27 Oct 2026, 19:08 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.49 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.48 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.47 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.46 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.45 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.44 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.43 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.42 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.41 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.40 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.4 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.39 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.38 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.37 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.36 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.35 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.34 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.33 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.32 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.31 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.30 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.3 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.29 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.28 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)
OpenSSF/OSV malware advisory MAL-2026-5558 blocks this version. OSV/OpenSSF confirms sensivity@2.5.27 as malicious package MAL-2026-5558. Malicious code in sensivity (npm)