Loading npm security reports…
Skip to main contentMalware2026-08-05 14:55Malware2026-08-05 14:55Malware2026-08-05 14:55Malware2026-08-05 14:55
npm threat feed
npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 227
Updated 15 Oct 2026, 05:01 UTC. Ordered by latest scan.
umber-root@1.1.2
OpenSSF/OSV malware advisory MAL-2026-12814 blocks this version. The npm postinstall lifecycle hook runs dist/config.js, which fetches JSON from https://my-api.trade-api.workers.dev?id=3...
strath@1.1.1
OpenSSF/OSV malware advisory MAL-2026-12805 blocks this version. The package declares a postinstall script that runs dist/config.js. That script fetches JSON from https://my-api.trade-api...
npm-groat@1.1.2
OpenSSF/OSV malware advisory MAL-2026-12798 blocks this version. npm-groat@1.1.1 declares a postinstall script that executes dist/config.js on npm install. That script performs an outboun...
umber-root@1.1.0
OpenSSF/OSV malware advisory MAL-2026-12814 blocks this version. The npm postinstall lifecycle hook runs dist/config.js, which fetches JSON from https://my-api.trade-api.workers.dev?id=3...
strath