Loading npm security reports…
Skip to main contentSoft block: AI-agent control surface2026-08-17 01:50Remote Code Execution2026-08-17 01:31Soft block: AI-agent control surface2026-08-17 00:49Soft block: AI-agent control surface2026-08-17 00:41
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 344
Updated 17 Oct 2026, 21:57 UTC. Ordered by latest scan.
@agentprojectcontext/apx@1.78.0
This is a concrete unconsented postinstall mutation of broad foreign AI-agent control surfaces, compounded by mutable remote instruction retrieval. It meets the blocking policy even thoug...
@ai-vertical/ai-agent@1.0.1
The package implements an immediate remote-payload loader and dynamic evaluator with no integrity check, user action, or package-aligned functionality. This is concrete remote code execut...
@agentprojectcontext/apx@1.77.3
The package performs unconsented postinstall mutation of broad, foreign AI-agent control surfaces and incorporates remote instruction content. This meets the blocking policy despite no co...
@shuv1337/shuvgrok@1.0.4
This is a concrete unconsented postinstall mutation of a shared upstream AI-agent control surface, meeting the blocking policy. No source evidence of network exfiltration was found, but i...