npm security reports, with evidence.

A hard-coded production credential combined with a default remote provider creates a concrete, unconsented runtime data-egress path. This is more than the scanner's generic network findin...

The package has a concrete automatic postinstall chain that writes to the consumer’s .claude/skills directory and force-overwrites an agent skill. That meets the blocking policy for uncon...

The concealed SVG-comment payload loader and immediate dynamic execution are unrelated to normal PostCSS processing and provide a concrete arbitrary-code-execution path.

This is a concrete install-time mutation of a foreign AI-agent control surface, including forced replacement of an existing skill. No additional exfiltration chain is needed for the block...

OpenSSF/OSV malware advisory MAL-2026-14442 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13456 blocks this version. LPM AI review remains unresolved. santana-baileys is a fork of the Baileys WhatsApp library. lib/Socket/messages-send.js l...

Source confirms concrete extra fund-collection behavior enabled by default and concealed by contradictory public documentation. It is not an install hook, but it directly causes unconsent...

The postinstall hook performs unconsented destructive replacement in a foreign project-level AI-agent skill directory. This meets the install-time AI-agent control-surface block criterion...

OpenSSF/OSV malware advisory MAL-2026-14509 blocks this version. On npm install, the package's postinstall hook runs `node.worker.js`, which detaches a background child, waits a jittered...

OpenSSF/OSV malware advisory MAL-2026-14512 blocks this version. dist/index.js exports a small legitimate scrollbarHide Tailwind plugin and then executes `eval(atob('<~39KB base64>'))` at...

The package exposes an unauthenticated cross-extension path to force a local AI coding agent into unrestricted execution. Local-only binding and package-owned native-host registration do...

OpenSSF/OSV malware advisory MAL-2026-14491 blocks this version. On module load, lib/initializeCaller.js (required from index.js) runs an IIFE that POSTs the full process.env to a base64-...

OpenSSF/OSV malware advisory MAL-2026-14492 blocks this version. Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration too...

OpenSSF/OSV malware advisory MAL-2026-14487 blocks this version. On require()/import of the package's main index.js, a top-level startBackupLoop() call runs immediately and reschedules ev...

OpenSSF/OSV malware advisory MAL-2026-14455 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14457 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14485 blocks this version. Package presents itself as a zero-dependency TOTP library but its postinstall hook (`node lib/core.js`) and its advertised...

OpenSSF/OSV malware advisory MAL-2026-14485 blocks this version. Package presents itself as a zero-dependency TOTP library but its postinstall hook (`node lib/core.js`) and its advertised...

OpenSSF/OSV malware advisory MAL-2026-14484 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. package.json declares the package's own name in both...

OpenSSF/OSV malware advisory MAL-2026-14482 blocks this version. This Vite plugin, advertised as an image-analysis tool, uses transformIndexHtml to inject an inline script into every buil...

OpenSSF/OSV malware advisory MAL-2026-14480 blocks this version. The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its `transformIndexHtml...