Loading npm security reports…
Skip to main contentRemote Code Execution2026-07-01 00:18Remote Code Execution2026-06-30 22:34
npm threat feed
npm remote execution reports, with evidence.
Investigate remote code execution and remote payload execution, including code fetched or launched by a package. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 58
Updated 10 Oct 2026, 02:13 UTC. Ordered by latest scan.
db-connector-log@1.0.1
Direct source inspection confirms a hidden, package-misaligned remote payload execution path in index.js. Although not install-time, the exported runtime method is concrete malicious beha...
buffer-util-internal@1.0.14
Static source inspection confirms concrete import-time remote code execution in index.js, not merely a scanner hint. This is unconsented executable payload loading unrelated to the stated...