npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms hardhat-promised@2.21.0 as malicious (MAL-2026-17662): Malicious code in hardhat-promised (npm)

OpenSSF Malicious Packages via OSV confirms mfasolver@1.0.0 as malicious (MAL-2026-17663): Malicious code in mfasolver (npm)

OpenSSF Malicious Packages via OSV confirms abbishal-poc-as-dependency@1.3.1 as malicious (MAL-2026-17653): Malicious code in abbishal-poc-as-dependency (npm)

OpenSSF Malicious Packages via OSV confirms abbishal-poc-as-dependency@1.3.0 as malicious (MAL-2026-17653): Malicious code in abbishal-poc-as-dependency (npm)

OpenSSF Malicious Packages via OSV confirms @praveenvjpm/color-utils-7210@1.0.0 as malicious (MAL-2026-17651): Malicious code in @praveenvjpm/color-utils-7210 (npm)

OpenSSF Malicious Packages via OSV confirms @ziedzzz/demo-canary@1.0.0 as malicious (MAL-2026-17652): Malicious code in @ziedzzz/demo-canary (npm)

The postinstall hook silently mutates user-level AI-agent configuration and installs a package-controlled MCP server with auto-approved tools. This is unconsented install-time control-sur...

The package’s automatic preinstall hook launches obfuscated code that downloads and executes a staged payload. This is concrete install-time remote code execution, supporting a malicious...

The main entrypoint exposes an explicit command that downloads and executes remote code, establishing a concrete remote code execution capability. The package has no install lifecycle hoo...

Source confirms an automatic postinstall hook that rewrites MCP registrations for multiple agent clients and creates launchers. This meets the policy for unconsented mutation of foreign o...

The executable browser entrypoints contain targeted page disruption and unwanted looping audio unrelated to the package's exchange functionality. The guarded trigger limits reach but does...

The package’s main entrypoint contains targeted browser disruption and looping external audio, which is concrete protestware behavior. The lack of an install hook does not remove this run...

The exported browser bundle deliberately disrupts page interaction and forces looping audio for a targeted group after a delay. This is concrete protestware behavior and warrants blocking...

Static inspection confirms active, targeted browser disruption in a bundle served by the application. This is concrete protestware behavior, so the package should be blocked.

The postinstall hook triggers setup across supported platforms, and the setup code writes AI-agent instructions and configures integrations. This meets the policy for unconsented install-...

OpenSSF Malicious Packages via OSV confirms imgbundle@1.0.2 as malicious (MAL-2026-17330): Malicious code in imgbundle (npm)

The published browser entrypoints include targeted, delayed page disruption paired with looping externally hosted audio. This is concrete protestware behavior, so the package should be bl...

The published entrypoints contain active, targeted browser disruption that is unrelated to the package’s apparent UI component purpose. This is concrete protestware behavior and warrants...

The browser bundle implements targeted, disruptive behavior unrelated to user registration. The conditional trigger does not make the page disruption or unsolicited audio benign.

The inspected browser bundle contains targeted disruptive behavior: it disables page interaction and loops externally hosted audio under language, host, and timing conditions. This suppor...