npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms swnwall@1.2.10 as malicious (MAL-2026-16211): Malicious code in swnwall (npm)

OpenSSF Malicious Packages via OSV confirms @prime0/alanced-match@1.0.0 as malicious (MAL-2026-16204): Malicious code in @prime0/alanced-match (npm)

OpenSSF Malicious Packages via OSV confirms @prime0/pcomatch@1.0.0 as malicious (MAL-2026-16206): Malicious code in @prime0/pcomatch (npm)

The automatic postinstall chain performs broad, foreign AI-agent skill installation without an explicit user setup command. This meets the install-hook abuse blocking policy even though t...

The automatic lifecycle path executes opaque native code to modify foreign AI-agent controls, and the binary contains an explicit safety-bypass command. This meets the install-hook abuse...

The automatic lifecycle hook performs unconsented mutation of both Codex and Claude user skill directories, with recursive deletion, and changes the Python user environment. This meets th...

This is an unconsented install-time remote-payload chain that automatically invokes opaque AI-tool onboarding. The optional integrity check and process termination increase the risk.

This is an automatic lifecycle delivery chain for opaque native code from an unverified remote source, with TLS verification explicitly disabled. It creates a concrete install-time arbitr...

This is an unconsented postinstall mutation of broad foreign AI-agent control surfaces, with destructive synchronization and an installed agent-execution instruction set. It meets the ins...

OpenSSF Malicious Packages via OSV confirms @zaka13/thing@1.0.0 as malicious (MAL-2026-16200): Malicious code in @zaka13/thing (npm)

OpenSSF Malicious Packages via OSV confirms kartykp-prod-oidc-test-pkg@1.0.4 as malicious (MAL-2026-16197): Malicious code in kartykp-prod-oidc-test-pkg (npm)

OpenSSF Malicious Packages via OSV confirms plogme@1.0.2 as malicious (MAL-2026-16199): Malicious code in plogme (npm)

OpenSSF Malicious Packages via OSV confirms plogme@1.0.1 as malicious (MAL-2026-16199): Malicious code in plogme (npm)

OpenSSF Malicious Packages via OSV confirms plogme@1.0.0 as malicious (MAL-2026-16199): Malicious code in plogme (npm)

The package has a concrete automatic postinstall path that modifies host software through package managers, including sudo, and repeats it at runtime. This is unsafe install-hook abuse ra...

This is an automatic, unverified remote payload execution chain during npm installation. Platform filtering does not constrain the code supplied by the latest release or redirect target.

The automatic postinstall hook mutates a foreign global AI-agent toolchain and persistent user configuration. This is concrete unconsented install-time control-surface mutation, so it mee...

OpenSSF Malicious Packages via OSV confirms kartykp-prod-oidc-test-pkg@1.0.3 as malicious (MAL-2026-16197): Malicious code in kartykp-prod-oidc-test-pkg (npm)

OpenSSF Malicious Packages via OSV confirms kartykp-token-pkg@1.0.2 as malicious (MAL-2026-16198): Malicious code in kartykp-token-pkg (npm)

This is unconsented install-time mutation of SSH credentials, local SSH configuration, remote authorized keys, system packages, and background processes. The behavior is concrete and reac...

This is an automatic lifecycle chain that executes a remotely obtained opaque binary and broadly installs AI-agent skills. The embedded hash does not make the unreviewable, unconsented ag...