Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 9 Oct 2026, 03:24 UTC. Ordered by latest scan.
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.9 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.8 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.7 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.6 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @ostyado/baileys@2.0.9 as malicious (MAL-2026-17372): Malicious code in @ostyado/baileys (npm)