Loading npm security reports…
Skip to main contentMalware2026-09-10 05:40Malware2026-09-10 05:40Malware2026-09-10 05:40Malware2026-09-10 05:40
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 91
Updated 10 Oct 2026, 23:09 UTC. Ordered by latest scan.
etoro-builders@999.0.0
OpenSSF Malicious Packages via OSV confirms etoro-builders@999.0.0 as malicious (MAL-2026-16116): Malicious code in etoro-builders (npm)
etoro-auth@999.0.0
OpenSSF Malicious Packages via OSV confirms etoro-auth@999.0.0 as malicious (MAL-2026-16114): Malicious code in etoro-auth (npm)
etoro-api@999.0.0
OpenSSF Malicious Packages via OSV confirms etoro-api@999.0.0 as malicious (MAL-2026-16113): Malicious code in etoro-api (npm)
etoro-analytics@999.0.0
OpenSSF Malicious Packages via OSV confirms etoro-analytics@999.0.0 as malicious (MAL-2026-16112): Malicious code in etoro-analytics (npm)
etoro-aggregator@999.0.0
OpenSSF Malicious Packages via OSV confirms etoro-aggregator@999.0.0 as malicious (MAL-2026-16111): Malicious code in etoro-aggregator (npm)
