Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Updated 13 Oct 2026, 21:44 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-15665 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-15875 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2026-15880 blocks this version. Package is published as an element-ui utility library (`element-guci-util`, description '元素-ui 常用工具函数集合') but its main ent...
OpenSSF/OSV malware advisory MAL-2026-15880 blocks this version. Package is published as an element-ui utility library (`element-guci-util`, description '元素-ui 常用工具函数集合') but its main ent...
OpenSSF/OSV malware advisory MAL-2026-15659 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code