Loading npm security reports…
Skip to main contentMalware2026-09-08 21:30Malware2026-09-08 21:30Install Hook Abuse2026-09-08 21:13Install Hook Abuse2026-09-08 21:11
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 187
Updated 13 Oct 2026, 05:03 UTC. Ordered by latest scan.
@aspect-adv-ui/consent-manager@2.4.1
OpenSSF/OSV malware advisory MAL-2026-16050 blocks this version. @aspect-adv-ui/consent-manager 2.4.1 declares a postinstall hook (`node setup.js`) that fires automatically on every `npm...
@aspect-adv-ui/consent-manager@2.4.0
OpenSSF/OSV malware advisory MAL-2026-16050 blocks this version. @aspect-adv-ui/consent-manager 2.4.1 declares a postinstall hook (`node setup.js`) that fires automatically on every `npm...
@umschool/analytics@999.0.2
This package has a concrete automatic install-time collection-and-exfiltration path. The empty runtime API does not justify or mitigate that behavior.
@codyswann/lisa@4.54.2
The package performs broad AI-agent configuration and project mutations automatically during dependency installation, then uses a detached retry mechanism to preserve them. This is concre...