Loading npm security reports…
Skip to main contentMalware2026-08-23 04:00Soft block: AI-agent control surface2026-08-23 03:54Malware2026-08-23 03:40Malware2026-08-23 03:40
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 300
Updated 17 Oct 2026, 00:04 UTC. Ordered by latest scan.
tailwind-animate-css-plugin@1.0.0
OpenSSF/OSV malware advisory MAL-2026-14352 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
agentic-cortex@6.5.1
Concrete postinstall mutation of foreign, broad AI-agent control surfaces meets the block policy. The absence of observed external exfiltration does not remove the unconsented persistence...
stillm4ddpocs-rtest-bravo@999.9.9
OpenSSF/OSV malware advisory MAL-2026-14378 blocks this version. package.json declares scripts.preinstall = 'node index.js', so npm install auto-executes index.js. The script collects hos...
stillm4ddpocs-rtest-alpha@999.9.9
OpenSSF/OSV malware advisory MAL-2026-14377 blocks this version. package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's local IPv4, p...