npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms afhmxiewpsf@1.0.2 as malicious (MAL-2026-16158): Malicious code in afhmxiewpsf (npm)

OpenSSF Malicious Packages via OSV confirms get-power@1.0.3 as malicious (MAL-2026-16156): Malicious code in get-power (npm)

OpenSSF Malicious Packages via OSV confirms pino-ulid@2.12.3 as malicious (MAL-2026-16154): Malicious code in pino-ulid (npm)

OpenSSF Malicious Packages via OSV confirms n8n-nodes-sysdiag@1.0.4 as malicious (MAL-2026-16147): Malicious code in n8n-nodes-sysdiag (npm)

OpenSSF Malicious Packages via OSV confirms n8n-nodes-sysdiag@1.0.3 as malicious (MAL-2026-16147): Malicious code in n8n-nodes-sysdiag (npm)

OpenSSF Malicious Packages via OSV confirms n8n-nodes-sysdiag@1.0.2 as malicious (MAL-2026-16147): Malicious code in n8n-nodes-sysdiag (npm)

OpenSSF Malicious Packages via OSV confirms n8n-nodes-sysdiag@1.0.1 as malicious (MAL-2026-16147): Malicious code in n8n-nodes-sysdiag (npm)

OpenSSF Malicious Packages via OSV confirms n8n-nodes-sysdiag@1.0.0 as malicious (MAL-2026-16147): Malicious code in n8n-nodes-sysdiag (npm)

OpenSSF Malicious Packages via OSV confirms sql-limit-enforcer@10.0.0 as malicious (MAL-2026-16151): Malicious code in sql-limit-enforcer (npm)

OpenSSF Malicious Packages via OSV confirms web-main@22.1.2 as malicious (MAL-2026-16153): Malicious code in web-main (npm)

OpenSSF Malicious Packages via OSV confirms postgreesqlhelper@1.0.3 as malicious (MAL-2026-16150): Malicious code in postgreesqlhelper (npm)

OpenSSF Malicious Packages via OSV confirms discord-mfa-solver@1.0.3 as malicious (MAL-2026-16100): Malicious code in discord-mfa-solver (npm)

OpenSSF Malicious Packages via OSV confirms @aiwfm/communitywfm.scripts.api@28.1.28 as malicious (MAL-2026-16146): Malicious code in @aiwfm/communitywfm.scripts.api (npm)

OpenSSF Malicious Packages via OSV confirms tailwindcss-contact-forms@0.6.2 as malicious (MAL-2026-16124): Malicious code in tailwindcss-contact-forms (npm)

This is a concrete automatic install-time payload chain: obfuscated code downloads and detaches a remote executable. The behavior is unrelated to the package's stated API-wrapper role.

This package contains an automatic, deliberately obfuscated installer that conditionally downloads and executes an external binary. That is a concrete malicious install-hook chain unrelat...

The automatic lifecycle hook performs obfuscated remote payload download and detached execution, which is concrete malware behavior. The normal-looking Roblox wrapper code does not mitiga...

Direct inspection confirms an automatic preinstall hook that fingerprints the host and exfiltrates the values over HTTP. This is concrete malicious install-hook abuse.

This package contains a concealed, default-on action that changes a user's WhatsApp subscriptions during ordinary socket creation. The unrelated phone-number lookup endpoint reinforces th...

This is an obfuscated, remotely controlled redirect hidden behind a verification page, not a legitimate npm package function. Although it has no install hook, opening its declared entrypo...