npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-14430 blocks this version. hydration-dim-ui@1.0.0 presents itself as a calendar-day math utility, but its main entry dist/index.mjs runs at import ti...

OpenSSF/OSV malware advisory MAL-2026-14432 blocks this version. kelly-stake-sizing@0.1.1 declares postinstall = 'node scripts/install-check.cjs'. That script fetches a JSON config from h...

OpenSSF/OSV malware advisory MAL-2026-14439 blocks this version. secret-key-totp@1.5.1 declares a postinstall hook (`node./index.js --setup`) that executes a credential stealer and droppe...

OpenSSF/OSV malware advisory MAL-2026-14410 blocks this version. The package registers a preinstall hook (node index.js) that runs on npm install and harvests installer-side data: os.host...

OpenSSF/OSV malware advisory MAL-2026-14425 blocks this version. Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs `node lib/core.js --setup` as a po...

OpenSSF/OSV malware advisory MAL-2026-14425 blocks this version. Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs `node lib/core.js --setup` as a po...

OpenSSF/OSV malware advisory MAL-2026-14425 blocks this version. Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs `node lib/core.js --setup` as a po...

OpenSSF/OSV malware advisory MAL-2026-14425 blocks this version. Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs `node lib/core.js --setup` as a po...

OpenSSF/OSV malware advisory MAL-2026-14425 blocks this version. Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs `node lib/core.js --setup` as a po...

OpenSSF/OSV malware advisory MAL-2026-14425 blocks this version. Package advertises itself as a zero-dependency TOTP/HOTP library, but package.json runs `node lib/core.js --setup` as a po...

OpenSSF/OSV malware advisory MAL-2026-14420 blocks this version. @gsas/gsas-sdk@999.9.15 is a high-version public-registry squat targeting an internal `@gsas/gsas-sdk` name. package.json...

OpenSSF/OSV malware advisory MAL-2026-12208 blocks this version. On require('sme-scripts-cli'), index.js loads _bridge.js which detects OS/architecture, downloads an OS-specific binary fr...

OpenSSF/OSV malware advisory MAL-2026-14411 blocks this version. npm package dpg-media-7ehemel@999.9.15 executes `node index.js` from a `preinstall` lifecycle script that harvests install...

OpenSSF/OSV malware advisory MAL-2026-14410 blocks this version. The package registers a preinstall hook (node index.js) that runs on npm install and harvests installer-side data: os.host...

This is concrete unconsented postinstall mutation of foreign AI-agent control surfaces. Documentation does not eliminate the install-time control-hijack risk.

Direct inspection confirms install-time mutation beyond package-owned state, including automatic installation of a third-party AI-agent CLI and persistent PATH changes. No exfiltration wa...

Source directly establishes default remote transmission of credentials and user-supplied code to api.stainless.com. No install hook is involved, but the runtime exfiltration is sufficient...

The package performs unconsented postinstall mutation of foreign AI-agent control surfaces, meeting the block policy. Its guarded global-install condition and some verified desktop handli...

The package performs agent-hook installation automatically during npm postinstall through an opaque native executable. This meets the block policy for unconsented install-time broad AI-ag...

This is concrete persistent collection and exfiltration of sensitive local AI-agent transcript content to a package-controlled endpoint, activated by normal CLI use without a separate opt...

The package transmits authentication credentials and optional 2FA material to a hard-coded non-Facebook endpoint during normal recovery behavior. The absence of lifecycle hooks does not m...