npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1338.6 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1338.3 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1338.2 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1338.1 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1337.8 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1337.7 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1337.5 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.1337.1 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.0.5 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

OpenSSF Malicious Packages via OSV confirms @nimbusedge/auth@19999.0.2 as malicious (MAL-2026-16132): Malicious code in @nimbusedge/auth (npm)

The encoded directive aimed at AI reviewers is malicious social engineering, and the package deliberately obscures the runtime code that consumers import. Although no install hook or conf...

This is a concrete install-hook abuse chain: a dependency install automatically downloads and executes remote scripts and adds foreign AI tooling. The opt-out variables do not establish p...

The automatic lifecycle hook performs remote content retrieval and unconsented writes and deletions in multiple global AI-agent instruction directories. This is concrete install-hook abus...

This is an automatic install-time mutation of a foreign AI-agent executable surface. The package supplies opaque native replacements, so the resulting code cannot be source-audited here.

This is a concealed install-time remote code execution chain, not functionality required for a glob matcher. The automatic execution, opaque payload retrieval, evaluation, and cleanup est...

The package uses automatic lifecycle hooks to stage, execute, and erase a concealed remote payload. This is concrete malicious install-hook abuse.

The postinstall dry-run claim is contradicted by the helper’s unchecked default execution path. The package automatically launches a detached listener and alters user state during install...

This is malicious under the install-control-surface policy: postinstall modifies all detected coding-agent configurations without user consent while installing a remote executable payload...

The package’s postinstall behavior materially differs from its stated validation purpose and automatically launches a persistent service. Its local-only default does not make the unconsen...

The only package source defines an automatic preinstall hook that establishes a remote interactive shell and performs external data posting. This is concrete install-time malware behavior.