Loading npm security reports…
Skip to main contentMalware2026-08-19 03:25Malware2026-08-19 03:25Malware2026-08-19 03:25Malware2026-08-19 03:00
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 320
Updated 17 Oct 2026, 09:12 UTC. Ordered by latest scan.
sysc1@1.0.1
OpenSSF/OSV malware advisory MAL-2026-14214 blocks this version. Package declares itself a 'System binary configuration tool' but ships a coordinated surveillance payload. package.json ma...
sysc1@1.0.0
OpenSSF/OSV malware advisory MAL-2026-14214 blocks this version. Package declares itself a 'System binary configuration tool' but ships a coordinated surveillance payload. package.json ma...
@lilsccott6x9/devpipe-connector@1.0.0
OpenSSF/OSV malware advisory MAL-2026-14203 blocks this version. The package's postinstall lifecycle hook (package.json declares postinstall=node scripts/setup.js) decodes base64-encoded...
chai-as-gateway@7.1.5
OpenSSF/OSV malware advisory MAL-2026-14200 blocks this version. The package advertises itself as a logger (README and type definitions copied wholesale from pinojs/pino) but its exported...
