npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-14580 blocks this version. The package '@postman-cse/okta-aio-darwin-arm64' was identified as containing malicious obfuscated code.

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14578 blocks this version. The `push` subcommand of this CLI catches exceptions from git operations and, in the error handler, sends the git error te...

OpenSSF/OSV malware advisory MAL-2026-14568 blocks this version. src/index.js re-exports the legitimate tailwindcss-forms plugin as a working cover, then appends an obfuscator.io-style _0...

OpenSSF/OSV malware advisory MAL-2026-14567 blocks this version. LPM AI assessed this version as clean; the assessments disagree. index.js re-exports the legitimate tailwindcss-3d plugin...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...

OpenSSF/OSV malware advisory MAL-2026-10735 blocks this version. On initialization of the framework (index.js -> init()), lib/wsClient.js opens a WebSocket to ws://socket.social-browser.c...