Loading npm security reports…
Skip to main contentMalware3 days ago 04:20Malware3 days ago 04:20Malware3 days ago 04:20Malware3 days ago 04:20
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 8
Updated 8 Oct 2026, 13:14 UTC. Ordered by latest scan.
aria-live-region-helper@1.0.0
OpenSSF Malicious Packages via OSV confirms aria-live-region-helper@1.0.0 as malicious (MAL-2026-17546): Malicious code in aria-live-region-helper (npm)
unified-platform@99.9.1
OpenSSF Malicious Packages via OSV confirms unified-platform@99.9.1 as malicious (MAL-2026-17566): Malicious code in unified-platform (npm)
risk-detection@99.9.1
OpenSSF Malicious Packages via OSV confirms risk-detection@99.9.1 as malicious (MAL-2026-17563): Malicious code in risk-detection (npm)
typesens@1.0.0
OpenSSF Malicious Packages via OSV confirms typesens@1.0.0 as malicious (MAL-2026-17565): Malicious code in typesens (npm)