npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-15523 blocks this version. package.json declares a self-named dependency 'sycm-vendors' whose source is the bare URL https://repo.securityctrl.com/sy...

OpenSSF/OSV malware advisory MAL-2026-15496 blocks this version. package.json declares a single dependency whose key equals the package's own name (`amplitude-experiment`) and whose sourc...

OpenSSF/OSV malware advisory MAL-2026-15521 blocks this version. package.json declares a dependency whose key equals the package's own name (search-reservation) and whose value is the bar...

OpenSSF/OSV malware advisory MAL-2026-15517 blocks this version. package.json declares a dependency whose key equals the package's own name (`one-intuit-help-system-utils`) and whose valu...

OpenSSF/OSV malware advisory MAL-2026-15491 blocks this version. index.js contains an IIFE that fires on require() and walks the installer's home and project directories collecting.env* f...

OpenSSF/OSV malware advisory MAL-2026-15491 blocks this version. index.js contains an IIFE that fires on require() and walks the installer's home and project directories collecting.env* f...

OpenSSF/OSV malware advisory MAL-2026-14841 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14819 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14809 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14807 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14813 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14823 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14810 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14808 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14978 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14923 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14991 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14873 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14880 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14961 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code