npm threat feed

npm security reports, with evidence.

Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.

Security reports — page 268

Updated 15 Oct 2026, 06:29 UTC. Ordered by latest scan.

3layerdipstackoue8uj@0.1.4

OpenSSF/OSV malware advisory MAL-2026-14865 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

Malware2026-08-28 19:50

3layerdipstackmu4bxx@0.1.4

OpenSSF/OSV malware advisory MAL-2026-14837 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

Malware2026-08-28 19:50

3layerdipstackl88spb@0.1.4

OpenSSF/OSV malware advisory MAL-2026-14815 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

Malware2026-08-28 19:50

3layerdipstacks0fpdw@0.1.4

OpenSSF/OSV malware advisory MAL-2026-14913 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

Malware2026-08-28 19:50