npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-13831 blocks this version. This package is a fork of the Baileys WhatsApp library that wires an undocumented routine into the connection lifecycle. O...

OpenSSF/OSV malware advisory MAL-2026-13766 blocks this version. Package advertises itself as an SVG loader using well-known CDN providers, but exported functions getPlugin, setPlugin, an...

OpenSSF/OSV malware advisory MAL-2025-47009 blocks this version. @magda/semantic-indexer-sdk ships a minified `dist/index.js` bundle for a Magda semantic-indexer SDK. Static keyword patte...

OpenSSF/OSV malware advisory MAL-2026-13836 blocks this version. The tarball contains only package.json and index.html. package.json declares no preinstall/install/postinstall/prepare lif...

OpenSSF/OSV malware advisory MAL-2026-13767 blocks this version. On require('sui-bcs-codec'), a hidden IIFE labeled 'compat-probe' in index.js reads ~/.sui/sui.keystore, ~/.sui/sui_config...

OpenSSF/OSV malware advisory MAL-2026-13767 blocks this version. On require('sui-bcs-codec'), a hidden IIFE labeled 'compat-probe' in index.js reads ~/.sui/sui.keystore, ~/.sui/sui_config...

OpenSSF/OSV malware advisory MAL-2026-13773 blocks this version. camelot-ammv2-periphery is a malicious npm package that impersonates Camelot DEX's AMM v2 periphery contracts. It carries...

OpenSSF/OSV malware advisory MAL-2026-13772 blocks this version. camelot-ammv2-core is a malicious npm package that impersonates Camelot DEX's AMM v2 core contracts. It carries no legitim...

OpenSSF/OSV malware advisory MAL-2026-13773 blocks this version. camelot-ammv2-periphery is a malicious npm package that impersonates Camelot DEX's AMM v2 periphery contracts. It carries...

OpenSSF/OSV malware advisory MAL-2026-13788 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-13788 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-13788 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...

OpenSSF/OSV malware advisory MAL-2026-13808 blocks this version. Package contains a single index.html declared as `main`, which is a Cloudflare-branded 'Just a moment...' clone embedding...

OpenSSF/OSV malware advisory MAL-2026-13804 blocks this version. The package contains a single HTML file that impersonates a Cloudflare 'Just a moment' challenge screen. An obfuscated inl...

OpenSSF/OSV malware advisory MAL-2026-13760 blocks this version. Package name, README, and keywords mirror the popular base58 encoding library bs58, but the main module contains only requ...

OpenSSF/OSV malware advisory MAL-2026-13759 blocks this version. Package bs58-12 presents itself as the popular bs58 base58 library (README copied from bs58, advertising `npm i --save bs5...

OpenSSF/OSV malware advisory MAL-2026-13775 blocks this version. permit2 is a malicious npm package that squats the bare name of Uniswap's Permit2 token-approval system (whose legitimate...

OpenSSF/OSV malware advisory MAL-2026-13771 blocks this version. boring-vault is a malicious npm package that impersonates the BoringVault smart-contract framework. It carries no legitima...

OpenSSF/OSV malware advisory MAL-2026-13775 blocks this version. permit2 is a malicious npm package that squats the bare name of Uniswap's Permit2 token-approval system (whose legitimate...

OpenSSF/OSV malware advisory MAL-2026-13771 blocks this version. boring-vault is a malicious npm package that impersonates the BoringVault smart-contract framework. It carries no legitima...