npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms @angularr/cli@22.2.1 as malicious (MAL-2026-17492): Malicious code in @angularr/cli (npm)

OpenSSF Malicious Packages via OSV confirms @angulra/cli@22.2.1 as malicious (MAL-2026-17495): Malicious code in @angulra/cli (npm)

OpenSSF Malicious Packages via OSV confirms @angulra/core@1.0.67 as malicious (MAL-2026-17496): Malicious code in @angulra/core (npm)

OpenSSF Malicious Packages via OSV confirms @nagular/core@1.0.67 as malicious (MAL-2026-17499): Malicious code in @nagular/core (npm)

OpenSSF Malicious Packages via OSV confirms @nagular/router@2.2.1 as malicious (MAL-2026-17500): Malicious code in @nagular/router (npm)

Inspected source establishes unconsented postinstall mutation of a broad third-party AI-agent control surface, which meets the blocking policy. The separate interactive init command does...

OpenSSF Malicious Packages via OSV confirms exptredd@5.2.4 as malicious (MAL-2026-17247): Malicious code in exptredd (npm)

OpenSSF Malicious Packages via OSV confirms exptredd@5.2.3 as malicious (MAL-2026-17247): Malicious code in exptredd (npm)

OpenSSF Malicious Packages via OSV confirms exprdd@5.2.2 as malicious (MAL-2026-17241): Malicious code in exprdd (npm)

OpenSSF Malicious Packages via OSV confirms brioche-apl-dev-env@100.0.0 as malicious (MAL-2026-17432): Malicious code in brioche-apl-dev-env (npm)

OpenSSF Malicious Packages via OSV confirms express-enhanced@5.2.2 as malicious (MAL-2026-17489): Malicious code in express-enhanced (npm)

OpenSSF Malicious Packages via OSV confirms express-fork@5.2.2 as malicious (MAL-2026-17490): Malicious code in express-fork (npm)

OpenSSF Malicious Packages via OSV confirms css-a11y-contrast-utils@1.0.0 as malicious (MAL-2026-17475): Malicious code in css-a11y-contrast-utils (npm)

OpenSSF Malicious Packages via OSV confirms css-logical-prop-shim@1.0.0 as malicious (MAL-2026-17482): Malicious code in css-logical-prop-shim (npm)

OpenSSF Malicious Packages via OSV confirms chai-as-testmode@1.4.7 as malicious (MAL-2026-17473): Malicious code in chai-as-testmode (npm)

The active entrypoint connects ordinary middleware initialization to concealed remote code execution. The encoded endpoint, detached execution, and unrestricted response evaluation suppor...

Source proves automatic reconnaissance and external data transmission when the bundle is evaluated, unrelated to CSS reading-order functionality. The manifest loading paths make this exec...

Inspected source proves automatic reconnaissance and external data export when the registry payload loads. This is concrete malicious behavior unrelated to a CSS polyfill, despite the abs...

Inspected source proves automatic system reconnaissance and external data transmission unrelated to a CSS polyfill. This is an active data-exfiltration attack when the registry module is...

The inspected source establishes unconsented postinstall mutation of global Claude Code command settings, which meets the blocking policy. Package-aligned statusline functionality does no...