Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Updated 14 Oct 2026, 06:34 UTC. Ordered by latest scan.
This is an unconsented install-time mutation of a broad AI-agent control surface, followed by persistent promotion of project permissions into global settings. The behavior meets the inst...
OpenSSF/OSV malware advisory MAL-2026-5838 blocks this version. On require, index.js performs an unconditional `http.get` to a unique subdomain of oastify.com (Burp Suite Collaborator out...
OpenSSF/OSV malware advisory MAL-2026-10160 blocks this version. On require of the main entry `dist/index.js`, the module decodes a base64 literal to the shell command `npm install vector...
OpenSSF/OSV malware advisory MAL-2026-10160 blocks this version. On require of the main entry `dist/index.js`, the module decodes a base64 literal to the shell command `npm install vector...