Loading npm security reports…
Skip to main contentMalware2026-06-30 15:00Malware2026-06-30 15:00Malware2026-06-30 15:00Malware2026-06-30 15:00
npm threat feed
npm detections from LPM Firewall.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 306
Updated 15 Oct 2026, 23:51 UTC. Ordered by latest scan.
0e@0.0.17
Direct source inspection confirms import-time global console hijacking plus external forwarding of intercepted runtime data. This is concrete unconsented exfiltration behavior, not merely...
0e@0.0.13
Source inspection confirms concrete import-time global hijacking plus unconsented network exfiltration from host runtime console calls. This is not package-aligned behavior for a tiny pac...
0e@0.0.12
Despite the parse error reducing immediate exploitability, the package main contains concrete global console hijacking and data exfiltration code to unrelated external services. This is m...
0e@0.0.108
Direct inspection confirms concrete import-time global hijacking and runtime exfiltration in the package main entrypoint. The benign src/dist fetch helper does not mitigate the published...
showing 7626-7629 of 7629