Loading npm security reports…
Skip to main contentMalware2026-09-03 14:50Malware2026-09-03 06:30Malware2026-09-03 06:25Malware2026-09-03 06:25
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 226
Updated 14 Oct 2026, 03:47 UTC. Ordered by latest scan.
fieldbase-webapplication-buildtools@99.99.99
OpenSSF/OSV malware advisory MAL-2026-15847 blocks this version. package.json declares preinstall and install lifecycle scripts that collect the installer's username (whoami), hostname, c...
tailwindcss-3d-animate@0.0.1-security
OpenSSF/OSV malware advisory MAL-2026-14567 blocks this version. index.js re-exports the legitimate tailwindcss-3d plugin and then appends `eval(atob("..."))` at module top level, so the...
html-to-gutenberg@4.2.18
OpenSSF/OSV malware advisory MAL-2026-6359 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package ships a.vscode/tasks.json with runOn=fold...
tailwindcss-3d-animate@1.2.0
OpenSSF/OSV malware advisory MAL-2026-14567 blocks this version. LPM AI assessed this version as clean; the assessments disagree. index.js re-exports the legitimate tailwindcss-3d plugin...