npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms css-ogojwh-polyfill@1.0.0 as malicious (MAL-2026-17556): Malicious code in css-ogojwh-polyfill (npm)

OpenSSF Malicious Packages via OSV confirms css-gvqmfn-polyfill@1.0.0 as malicious (MAL-2026-17551): Malicious code in css-gvqmfn-polyfill (npm)

OpenSSF Malicious Packages via OSV confirms css-mpmdds-polyfill@1.0.0 as malicious (MAL-2026-17554): Malicious code in css-mpmdds-polyfill (npm)

OpenSSF Malicious Packages via OSV confirms css-txedrf-polyfill@1.0.0 as malicious (MAL-2026-17558): Malicious code in css-txedrf-polyfill (npm)

OpenSSF Malicious Packages via OSV confirms css-at-scope-polyfill@1.0.0 as malicious (MAL-2026-17547): Malicious code in css-at-scope-polyfill (npm)

OpenSSF Malicious Packages via OSV confirms aria-live-region-helper@1.0.0 as malicious (MAL-2026-17546): Malicious code in aria-live-region-helper (npm)

OpenSSF Malicious Packages via OSV confirms unified-platform@99.9.1 as malicious (MAL-2026-17566): Malicious code in unified-platform (npm)

OpenSSF Malicious Packages via OSV confirms risk-detection@99.9.1 as malicious (MAL-2026-17563): Malicious code in risk-detection (npm)

OpenSSF Malicious Packages via OSV confirms typesens@1.0.0 as malicious (MAL-2026-17565): Malicious code in typesens (npm)

OpenSSF Malicious Packages via OSV confirms ph-common@77.7.7 as malicious (MAL-2026-1809): Malicious code in ph-common (npm)

Source inspection establishes automatic transmission of personal Git information, beyond ordinary anonymous installation telemetry. A vendor-owned destination and opt-out flags do not est...

The source establishes unconsented postinstall mutation of a foreign, shared AI-agent control surface, which meets the blocking policy. Package-aligned instruction content and uninstall c...

Source confirms an unconsented postinstall write to a broad AI-agent instruction surface, which meets the blocking policy. The task-related content and directory guard do not remove that...

Inspected source proves automatic, unconsented postinstall writes to foreign agents’ global control configuration. This meets the explicit blocking rule regardless of the package’s safety...

Inspected source establishes unconsented postinstall writes to foreign agents' global control settings, which meets the blocking policy. Existing-policy preservation and package-aligned a...

OpenSSF Malicious Packages via OSV confirms translate-base-font@1.4.2 as malicious (MAL-2026-17458): Malicious code in translate-base-font (npm)

The source establishes unconsented install-time mutation of a foreign, global AI-agent control surface, which meets the specified blocking rule. Ordinary instruction content and the absen...

OpenSSF Malicious Packages via OSV confirms xeprews@5.2.2 as malicious (MAL-2026-17248): Malicious code in xeprews (npm)

OpenSSF Malicious Packages via OSV confirms apl-rive-renderer@100.0.0 as malicious (MAL-2026-17431): Malicious code in apl-rive-renderer (npm)

Inspected source establishes automatic collection and external transmission of local metadata during installation and import. This concrete data exfiltration supports blocking despite the...