Loading npm security reports…
Skip to main contentMalware1 hour agoMalware1 hour agoMalware1 hour agoMalware1 hour ago
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 2
Updated 8 Oct 2026, 08:08 UTC. Ordered by latest scan.
link-status-page@0.0.42
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.42 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.40
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.40 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.38
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.38 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.2
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.2 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
link-status-page@0.0.1
OpenSSF Malicious Packages via OSV confirms link-status-page@0.0.1 as malicious (MAL-2026-17338): Malicious code in link-status-page (npm)
