npm malware reports, with evidence.

OpenSSF Malicious Packages via OSV confirms express-session-timer@1.0.1 as malicious (MAL-2026-16065): Malicious code in express-session-timer (npm)

OpenSSF Malicious Packages via OSV confirms express-session-timer@1.0.0 as malicious (MAL-2026-16065): Malicious code in express-session-timer (npm)

OpenSSF Malicious Packages via OSV confirms selfcerts@1.0.0 as malicious (MAL-2026-16060): Malicious code in selfcerts (npm)

OpenSSF Malicious Packages via OSV confirms unifi-credential-server@99.0.0 as malicious (MAL-2026-15692): Malicious code in unifi-credential-server (npm)

OpenSSF Malicious Packages via OSV confirms vinzz-wcli@1.0.1 as malicious (MAL-2026-16058): Malicious code in vinzz-wcli (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-aspect-styles@0.4.2 as malicious (MAL-2026-16056): Malicious code in tailwind-aspect-styles (npm)

OpenSSF Malicious Packages via OSV confirms toru-ultimate@1.0.0 as malicious (MAL-2026-16057): Malicious code in toru-ultimate (npm)

OpenSSF Malicious Packages via OSV confirms sonmors@2.11.2 as malicious (MAL-2026-16055): Malicious code in sonmors (npm)

OpenSSF Malicious Packages via OSV confirms gloggo@1.1.4 as malicious (MAL-2026-16054): Malicious code in gloggo (npm)

OpenSSF Malicious Packages via OSV confirms gloggo@1.1.2 as malicious (MAL-2026-16054): Malicious code in gloggo (npm)

OpenSSF Malicious Packages via OSV confirms file-type-detector@1.1.1 as malicious (MAL-2026-16053): Malicious code in file-type-detector (npm)

OpenSSF Malicious Packages via OSV confirms file-type-detector@1.1.0 as malicious (MAL-2026-16053): Malicious code in file-type-detector (npm)

The package performs automatic install-time remote shell execution and installs a second executable component outside the reviewed artifact. This is an unconsented install-hook code-loadi...

The package performs unconsented remote payload execution during postinstall and retrieves mutable remote agent content. This is concrete install-hook abuse with a remote code execution p...

OpenSSF Malicious Packages via OSV confirms @umschool/analytics@999.0.1 as malicious (MAL-2026-16051): Malicious code in @umschool/analytics (npm)

OpenSSF Malicious Packages via OSV confirms @aspect-adv-ui/consent-manager@2.4.1 as malicious (MAL-2026-16050): Malicious code in @aspect-adv-ui/consent-manager (npm)

OpenSSF Malicious Packages via OSV confirms @aspect-adv-ui/consent-manager@2.4.0 as malicious (MAL-2026-16050): Malicious code in @aspect-adv-ui/consent-manager (npm)

This package has a concrete automatic install-time collection-and-exfiltration path. The empty runtime API does not justify or mitigate that behavior.

The package performs broad AI-agent configuration and project mutations automatically during dependency installation, then uses a detached retry mechanism to preserve them. This is concre...

OpenSSF Malicious Packages via OSV confirms b2b-frontend-external-library@9999.0.0 as malicious (MAL-2026-16008): Malicious code in b2b-frontend-external-library (npm)