npm advisory reports, with evidence.

OpenSSF Malicious Packages via OSV confirms css-flow-render-shim@1.0.0 as malicious (MAL-2026-17655): Malicious code in css-flow-render-shim (npm)

OpenSSF Malicious Packages via OSV confirms hardhat-promised@2.21.0 as malicious (MAL-2026-17662): Malicious code in hardhat-promised (npm)

OpenSSF Malicious Packages via OSV confirms mfasolver@1.0.0 as malicious (MAL-2026-17663): Malicious code in mfasolver (npm)

OpenSSF Malicious Packages via OSV confirms abbishal-poc-as-dependency@1.3.1 as malicious (MAL-2026-17653): Malicious code in abbishal-poc-as-dependency (npm)

OpenSSF Malicious Packages via OSV confirms abbishal-poc-as-dependency@1.3.0 as malicious (MAL-2026-17653): Malicious code in abbishal-poc-as-dependency (npm)

OpenSSF Malicious Packages via OSV confirms @praveenvjpm/color-utils-7210@1.0.0 as malicious (MAL-2026-17651): Malicious code in @praveenvjpm/color-utils-7210 (npm)

OpenSSF Malicious Packages via OSV confirms @ziedzzz/demo-canary@1.0.0 as malicious (MAL-2026-17652): Malicious code in @ziedzzz/demo-canary (npm)

The package’s automatic preinstall hook launches obfuscated code that downloads and executes a staged payload. This is concrete install-time remote code execution, supporting a malicious...

The main entrypoint exposes an explicit command that downloads and executes remote code, establishing a concrete remote code execution capability. The package has no install lifecycle hoo...

OpenSSF Malicious Packages via OSV confirms imgbundle@1.0.2 as malicious (MAL-2026-17330): Malicious code in imgbundle (npm)

OpenSSF Malicious Packages via OSV confirms cdn-img-fetch@1.0.3 as malicious (MAL-2026-17320): Malicious code in cdn-img-fetch (npm)

OpenSSF Malicious Packages via OSV confirms function-color@1.7.3 as malicious (MAL-2026-17647): Malicious code in function-color (npm)

OpenSSF Malicious Packages via OSV confirms function-flag@1.7.3 as malicious (MAL-2026-17648): Malicious code in function-flag (npm)

OpenSSF Malicious Packages via OSV confirms function-color@1.0.0 as malicious (MAL-2026-17647): Malicious code in function-color (npm)

The package entrypoint immediately evaluates obfuscated code with remote loader, network, and child-process indicators, supporting a malicious verdict despite the absence of install hooks...

The package entrypoint loads a heavily obfuscated module that invokes shell execution and includes network capability. This concrete, reachable behavior warrants blocking despite the exac...

The manifest activates bundles that collect host and local service information and send data to a fixed external receiver. This is active data exfiltration, so the package is malicious.

OpenSSF Malicious Packages via OSV confirms personio-pipeline-projen@1.171.31 as malicious (MAL-2026-17642): Malicious code in personio-pipeline-projen (npm)

OpenSSF Malicious Packages via OSV confirms store-webpack-config@0.0.1-security as malicious (MAL-2025-49241): Malicious code in store-webpack-config (npm)

OpenSSF Malicious Packages via OSV confirms store-webpack-config@1.0.0 as malicious (MAL-2025-49241): Malicious code in store-webpack-config (npm)