npm malware reports, with evidence.

This is a concrete automatic lifecycle hook that broadly mutates foreign AI-agent configuration and extension directories, with an additional automatic project upgrade. The absence of obs...

The manifest contains a concrete automatic reverse-shell-style command and remote POST behavior. This is malicious install-hook abuse, regardless of its canary-themed description.

The package embeds a remote-controlled, automatic account-subscription action in its standard runtime connection path. Its benign lifecycle version check does not mitigate that concrete b...

The package contains concealed, automatic account manipulation and a remotely controlled target list. This is concrete malicious runtime behavior, not package-aligned setup.

The runtime socket contains a concrete, remotely controlled, unconsented action on the consumer's authenticated WhatsApp account. The benign Node-version preinstall check does not mitigat...

This package executes remotely supplied scripts during an unconsented npm lifecycle hook and installs an external runtime outside the package. Its CLI also implements detached automatic r...

The automatic lifecycle chain executes mutable remote code and changes global tooling and skills without consent. This is concrete install-hook abuse, not merely user-invoked setup.

This is a concrete, unconsented install-hook abuse chain that broadly mutates and persistently controls consumer application files. No install-time exfiltration was found, but the destruc...

This is an automatic install-time remote code delivery chain with disabled TLS validation and no integrity verification. The downloaded native payload is opaque to the package review and...

The package contains concrete import-time protestware in both published JavaScript entry bundles. The lack of install hooks does not mitigate the targeted runtime denial of page interaction.

The package uses an automatic npm lifecycle hook to modify the host OS and request privileged package installation. This is concrete install-hook abuse, not a user-invoked setup action.

This is an automatic install-time remote native payload chain with disabled TLS verification and no integrity check. It creates a concrete supply-chain execution risk despite no observed...

The automatic lifecycle hook performs broad, destructive agent-configuration changes and activates a plugin across existing tools. This meets the install-hook abuse block policy despite n...

This package performs unconsented, automatic host-level package installation and destructive dependency mutation during postinstall. The behavior is concrete install-hook abuse even thoug...

The postinstall hook automatically overwrites global Pi agent instructions and creates user-wide files. This meets the install-hook abuse policy even though no network exfiltration was fo...

The automatic postinstall chain writes behavior-bearing configuration into Claude and Codex homes and registers command hooks. This meets the install-hook abuse policy even though no auto...

Automatic installation overwrites a foreign global AI-agent instruction file and installs user-wide command files. That concrete lifecycle behavior meets the install-hook abuse policy des...

OpenSSF Malicious Packages via OSV confirms codebuff-cli@1.1.3 as malicious (MAL-2026-4533): Malicious code in codebuff-cli (npm)

OpenSSF Malicious Packages via OSV confirms codebuff-cli@1.0.10 as malicious (MAL-2026-4533): Malicious code in codebuff-cli (npm)

OpenSSF Malicious Packages via OSV confirms codebuff-cli@1.0.4 as malicious (MAL-2026-4533): Malicious code in codebuff-cli (npm)

OpenSSF Malicious Packages via OSV confirms cc-skills-helper@1.0.6 as malicious (MAL-2026-13933): Malicious code in cc-skills-helper (npm)