npm security reports, with evidence.

The package performs automatic install-time transmission of an environment credential to a remote endpoint. The absence of shell execution or file mutation does not remove the concrete cr...

This is a concrete remote-code-execution loader activated by a normal import, with persistence-like detached process behavior. The lack of an install hook does not reduce the import-time...

The package performs unconsented install-time transmission of an environment credential to a remote service. Its normal icon exports do not justify this credential-harvesting lifecycle be...

This is an unconsented postinstall mutation of a broad, foreign AI-agent control surface with future command execution. No exfiltration was found, but the automatic persistent hook meets...

This is concrete, automatic postinstall mutation of multiple foreign AI-agent control surfaces. The absence of exfiltration does not neutralize the unconsented control-surface writes.

This package creates an unconsented install-time remote binary delivery and persistence path with no independent integrity verification. The absence of secret harvesting does not mitigate...

The automatic postinstall modifies both package-manager behavior and foreign AI-agent instruction surfaces. The included reviewer-directed secret-suppression rule reinforces malicious int...

This is an unconsented postinstall mutation of broad, foreign AI-agent control surfaces, with deletion capability. The lifecycle payload is executable agent instruction content rather tha...

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.1 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.0-rc-37 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@1.0.0 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

The package has a concrete automatic lifecycle path that overwrites a third-party AI-agent adapter. Version and source checks constrain the patch but do not restore user consent for the m...

OpenSSF Malicious Packages via OSV confirms discord-resolvers@3.4.2 as malicious (MAL-2026-16214): Malicious code in discord-resolvers (npm)

OpenSSF Malicious Packages via OSV confirms swnwall@1.2.10 as malicious (MAL-2026-16211): Malicious code in swnwall (npm)

OpenSSF Malicious Packages via OSV confirms @prime0/alanced-match@1.0.0 as malicious (MAL-2026-16204): Malicious code in @prime0/alanced-match (npm)

OpenSSF Malicious Packages via OSV confirms @prime0/pcomatch@1.0.0 as malicious (MAL-2026-16206): Malicious code in @prime0/pcomatch (npm)

The package performs automatic postinstall mutation of consumer package-manager and AI-agent control files, then supplies reviewer-suppression and unsafe secret-handling instructions. Thi...

The automatic postinstall chain performs broad, foreign AI-agent skill installation without an explicit user setup command. This meets the install-hook abuse blocking policy even though t...

The package performs unconsented collection of local AI-agent account identity material and automatic third-party telemetry transmission. Hashing does not remove the stable cross-session...

The package's postinstall hook silently writes a Gemini skill into the user's home configuration and embeds instructions that authorize an agent to execute the package. This meets the ins...

The package performs broad consumer-project AI-agent configuration changes automatically during npm installation and suppresses review of those changes. This meets the install-control-sur...