Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Updated 17 Oct 2026, 18:14 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-14083 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2026-14093 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2026-2862 blocks this version. The package rtms-manager was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-2862 blocks this version. The package rtms-manager was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-14091 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...