npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-10775 blocks this version. Package masquerades as an n8n community node (package.json declares n8n.nodes: ["MyNode.js"], a trivial placeholder) while...

OpenSSF/OSV malware advisory MAL-2026-10776 blocks this version. The package advertises itself as a community utility node for n8n but its declared main (index.js) is a self-executing IIF...

OpenSSF/OSV malware advisory MAL-2026-10777 blocks this version. The package advertises itself as an n8n community-node utility but its main entry index.js executes a recon routine at mod...

OpenSSF/OSV malware advisory MAL-2026-10774 blocks this version. The OpenSSF Package Analysis project identified 'n8n-nodes-api-finder' @ 1.0.0 (npm) as malicious.

OpenSSF/OSV malware advisory MAL-2026-10769 blocks this version. On npm install, the package's postinstall hook executes index.js, which POSTs the installer's full process.env, OS usernam...

OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...

OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...

OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. px8my's `main` entry is a browser-side script that i...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...

OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...