Loading npm security reports…
Skip to main contentMalware2026-08-24 14:35Malware2026-08-24 14:00Malware2026-08-24 06:50Malware2026-08-24 06:10
npm threat feed
npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 123
Updated 12 Oct 2026, 17:30 UTC. Ordered by latest scan.
dpg-media-7ehemel@999.9.15
OpenSSF/OSV malware advisory MAL-2026-14411 blocks this version. npm package dpg-media-7ehemel@999.9.15 executes `node index.js` from a `preinstall` lifecycle script that harvests install...
@temptation.js/utils@999.9.16
OpenSSF/OSV malware advisory MAL-2026-14410 blocks this version. The package registers a preinstall hook (node index.js) that runs on npm install and harvests installer-side data: os.host...
sm-admin@99.0.1
OpenSSF/OSV malware advisory MAL-2026-14393 blocks this version. Package sm-admin@99.0.0 defines preinstall and postinstall lifecycle scripts that issue plain-HTTP GET requests to a hardc...
sm-apikey-model@99.0.1
OpenSSF/OSV malware advisory MAL-2026-14394 blocks this version. package.json declares preinstall and postinstall lifecycle scripts that invoke curl over plain HTTP to a hardcoded bare-IP...