Loading npm security reports…
Skip to main contentMalware2026-09-08 20:00Malware2026-09-08 19:50Malware2026-09-08 19:50Malware2026-09-08 19:50
npm threat feed
npm malware reports, with evidence.
Explore malware, protestware, install-hook abuse, staged payload carriers, crypto mining, and typosquatting. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 98
Updated 11 Oct 2026, 03:37 UTC. Ordered by latest scan.
jwt-logger@2.1.9
OpenSSF Malicious Packages via OSV confirms jwt-logger@2.1.9 as malicious (MAL-2026-15991): Malicious code in jwt-logger (npm)
punypump@1.2.5
OpenSSF Malicious Packages via OSV confirms punypump@1.2.5 as malicious (MAL-2026-16048): Malicious code in punypump (npm)
punypump@1.2.4
OpenSSF Malicious Packages via OSV confirms punypump@1.2.4 as malicious (MAL-2026-16048): Malicious code in punypump (npm)
tailwindcss-aspectratio-styles@0.3.5
OpenSSF Malicious Packages via OSV confirms tailwindcss-aspectratio-styles@0.3.5 as malicious (MAL-2026-16049): Malicious code in tailwindcss-aspectratio-styles (npm)
tailwindcss-aspectratio-styles@0.3.4
OpenSSF Malicious Packages via OSV confirms tailwindcss-aspectratio-styles@0.3.4 as malicious (MAL-2026-16049): Malicious code in tailwindcss-aspectratio-styles (npm)