Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 13 Oct 2026, 08:07 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-14079 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2025-192155 blocks this version. The package elf-stats-sparkly-cushion-340 was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2025-47119 blocks this version. The package communicates with a domain associated with malicious activity.
OpenSSF/OSV malware advisory MAL-2026-14085 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2026-14084 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...