Loading npm security reports…
Skip to main contentMalware2026-09-09 04:00Malware2026-09-09 04:00Malware2026-09-09 04:00Malware2026-09-09 04:00
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 95
Updated 11 Oct 2026, 01:50 UTC. Ordered by latest scan.
llm-traces-app@1.0.2
OpenSSF Malicious Packages via OSV confirms llm-traces-app@1.0.2 as malicious (MAL-2026-6371): Malicious code in llm-traces-app (npm)
simplisafe-gatsby@1.0.2
OpenSSF Malicious Packages via OSV confirms simplisafe-gatsby@1.0.2 as malicious (MAL-2026-6379): Malicious code in simplisafe-gatsby (npm)
starship-timeline@1.0.2
OpenSSF Malicious Packages via OSV confirms starship-timeline@1.0.2 as malicious (MAL-2026-6485): Malicious code in starship-timeline (npm)
twilio-voice-js-reference-components@1.0.2
OpenSSF Malicious Packages via OSV confirms twilio-voice-js-reference-components@1.0.2 as malicious (MAL-2026-6373): Malicious code in twilio-voice-js-reference-components (npm)
paypal-postman-lib
