Loading npm security reports…
Skip to main contentCredential Exfiltration6 days ago 16:25Soft block: AI-agent control surface6 days ago 12:16Soft block: AI-agent control surface6 days ago 11:53Soft block: AI-agent control surface6 days ago 11:13
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 18
Updated 8 Oct 2026, 19:05 UTC. Ordered by latest scan.
@bobfrankston/rmfmail@1.2.353
Inspected executable code establishes automatic credential export to an external logging host through the active client startup path. The benign install hook does not neutralize this runt...
devez-vibe@1.9.38
Inspected source proves unconsented postinstall mutation of foreign AI-agent control surfaces, including overwriting and pruning existing skills. This supports blocking under the agent co...
sap-ai-dev-toolkit@0.8.5
Inspected source establishes unconsented postinstall mutation of a foreign AI-agent control surface. This meets the blocking policy independently of scanner labels or citation coverage li...
@telora/mcp-products@0.22.172
Inspected source proves unconsented postinstall mutation of global Claude Code command hooks, meeting the blocking policy for AI-agent control surfaces. Same-vendor binary names and condi...
