npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-15820 blocks this version. @systemzero/baileys is a fork of the WhatsApp Web library @whiskeysockets/baileys that adds a hidden remote-control channe...

OpenSSF/OSV malware advisory MAL-2026-15817 blocks this version. index.js runs `id; uname -a; hostname; date -u; ls -d /var/www/peertube` via execSync when PeerTube invokes the plugin's r...

OpenSSF/OSV malware advisory MAL-2026-15625 blocks this version. The package's postinstall lifecycle hook pipes the output of `env` through `nc` to a host reconstructed at install time fr...

OpenSSF/OSV malware advisory MAL-2026-15623 blocks this version. index.js contains a hidden code path where calling the library's generateCertificates API with the value 10 triggers loadS...

OpenSSF/OSV malware advisory MAL-2026-15812 blocks this version. eslint-rxjs is a masquerade package whose npm metadata is internally inconsistent: the name references ESLint/RxJS, the de...

OpenSSF/OSV malware advisory MAL-2026-15671 blocks this version. On npm install, the package's preinstall hook (package.json scripts.preinstall = `node index.js`) executes index.js, which...

The package contains a concrete, automatic destructive install hook targeting consumer dependencies. This warrants blocking regardless of otherwise ordinary runtime library code.

The manifest contains a concrete, automatic, destructive lifecycle command targeting unrelated consumer dependencies. The behavior is not required for a shared runtime library and is suff...

The package combines an automatic lifecycle hook, direct AI-agent instructions to act without a user command, and persistent writes to broad foreign AI-agent control surfaces. This is con...

This is an automatically activated remote-control and data-upload channel, coupled with unauthenticated-by-source remote replacement of the package. The absence of an npm lifecycle hook d...

This is a concrete autonomous remote-control and data-upload path, compounded by automatic unverified replacement of the package. The lack of an npm lifecycle hook does not remove the imp...

This is an automatically activated remote-control and upload channel with remote self-replacement, not merely a user-invoked marketplace operation. The lack of an npm lifecycle hook does...

The package creates an automatic remote command and update channel at import time, with server-directed collection and upload of local content. This is concrete unattended data exfiltrati...

Automatic installation performs destructive and broad consumer-project changes, including AI-agent instruction files. This meets the install-hook abuse blocking policy despite no observed...

The automatic postinstall hook mutates foreign consumer application files and root-level AI-agent instruction files. This meets the policy for malicious install-hook abuse despite no obse...

This package performs broad, unconsented consumer-project mutation during postinstall, including AI-agent control files. That meets the install-hook abuse blocking policy even though no s...

The automatic lifecycle hook exfiltrates an environment credential to a remote endpoint. The otherwise static SVG icon source does not mitigate this install-time behavior.

The package combines an unverified remote executable loader with concrete forwarding of OpenAI credentials to an unrelated fixed gateway. These are active attack paths reached through nor...

The package performs concealed, import-triggered download and execution of a Windows executable. The absence of an npm lifecycle hook does not mitigate this runtime arbitrary-code-executi...

The package contains concrete runtime disclosure of chat content to an advertising endpoint and unexplained hidden logging. The lack of an install hook limits the scope, but does not remo...