Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

npm security reports and threat intelligence — page 146 | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

npm threat feed

npm advisory reports, with evidence.

Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.

Source

All sources Public advisories LPM Firewall detections

Category

All categories Malware Credential / data exfiltration Remote execution AI-agent control-surface policy Dependency confusion Dependency script approvals Persistence / destructive behavior

Security reports — page 146

Updated 13 Oct 2026, 06:33 UTC. Ordered by latest scan.

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.

Malware2026-08-17 05:15

money-badger-open-rpc@199.99.100

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

Malware2026-08-17 05:15

money-badger-open-rpc@103.999.0

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

Malware2026-08-17 05:15

money-badger-open-rpc@102.999.0

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

Malware2026-08-17 05:15

money-badger-open-rpc@101.99.99

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

Malware2026-08-17 05:15

money-badger-open-rpc@100.99.99

OpenSSF/OSV malware advisory MAL-2026-3353 blocks this version. The package money-badger-open-rpc was found to contain malicious code.

Malware2026-08-17 05:15

amplitude-ma-ts@1.0.24

OpenSSF/OSV malware advisory MAL-2026-3028 blocks this version. npm stealer. Hardcoded Discord webhook id 1497047226428690432 in postinstall Folder/bin/S.js. Exfils {hostname, whoami, pwd...

Malware2026-08-17 05:15

fanduel@100.4.0

OpenSSF/OSV malware advisory MAL-2026-3334 blocks this version. The package fanduel was found to contain malicious code.

Malware2026-08-17 05:15

fanduel@100.2.0

OpenSSF/OSV malware advisory MAL-2026-3334 blocks this version. The package fanduel was found to contain malicious code.

Malware2026-08-17 05:15

fanduel@100.0.0

OpenSSF/OSV malware advisory MAL-2026-3334 blocks this version. The package fanduel was found to contain malicious code.

Malware2026-08-17 05:15

tether-base@99.0.0

OpenSSF/OSV malware advisory MAL-2026-3033 blocks this version. The package tether-base was found to contain malicious code.

Malware2026-08-17 05:15

rtms-manager-dev@1.4.0

OpenSSF/OSV malware advisory MAL-2026-14093 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

Malware2026-08-17 05:15

rtms-manager@1.4.0

OpenSSF/OSV malware advisory MAL-2026-2862 blocks this version. The package rtms-manager was found to contain malicious code.

Malware2026-08-17 05:15

google-logging-utils-internal@1.1.4

OpenSSF/OSV malware advisory MAL-2026-14082 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

Malware2026-08-17 05:15

google-logging-utils-internal@9.9.9

OpenSSF/OSV malware advisory MAL-2026-14082 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

Malware2026-08-17 05:15

google-logging-utils-internal@1.1.3

OpenSSF/OSV malware advisory MAL-2026-14082 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

Malware2026-08-17 05:15

showing 3626-3650 of 16502

LPM.dev Registry

© 2026 LPM