npm security reports, with evidence.

This package silently substitutes a package-controlled remote API for direct Facebook credential login and sends supplied credentials there by default. No install hook is needed for this...

The artifact contains concrete automatic cryptomining behavior and deceptive package documentation. It is not an install hook, but import-time execution provides a direct malicious runtim...

OpenSSF/OSV malware advisory MAL-2026-14054 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. depcruise-fmt ships an empty module (index.js export...

OpenSSF/OSV malware advisory MAL-2026-14068 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. depcruise-wrap-stream-in-html@99.9.1 is a hollow pac...

OpenSSF/OSV malware advisory MAL-2026-14053 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. depcruise-baseline@99.9.1 has a name resembling depe...

This is concrete unconsented account manipulation on the package's normal runtime path, controlled by a remote payload list. The lifecycle script itself is benign but does not mitigate th...

This is concrete, automatic install-time host compromise behavior, not an inert installer primitive. The lack of observed exfiltration does not mitigate the concealed privileged remote-ac...

This is a concrete, unconsented install-time remote-access and stealth-persistence chain, not a package-aligned installer. Source contains no compensating user-command gate beyond the ele...

Concrete unconsented postinstall persistence and remote-access changes establish malware behavior. No exfiltration endpoint is needed to substantiate the local administrative backdoor.

OpenSSF/OSV malware advisory MAL-2026-14056 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. gunzip-js@99.9.1 is a near-empty npm package (typosq...

Normal email-client networking does not justify silently exporting account configuration to an unrelated logging endpoint. The harmless scoped postinstall hook does not mitigate this runt...

This is concrete install-time privilege escalation, stealth, and remote-access enablement rather than a legitimate package-aligned installer. The absence of a web endpoint does not mitiga...

Runtime source directly sends serialized IMAP configuration, including a possible password field, to an external logging host. The benign workspace-symlink postinstall does not mitigate t...

This is an unconsented install-time remote-access persistence chain, not a user-invoked administrative tool. The lack of a JavaScript exfiltration client does not mitigate the automatic h...

This is concrete malicious install-time behavior: it modifies Windows security controls and creates concealed privileged remote access. Lack of observed exfiltration does not mitigate the...

The package performs an unconsented elevated postinstall chain that weakens RDP security, creates hidden privileged access, and disguises persistence. No exfiltration endpoint is needed f...

This package performs a malicious install-time Windows backdoor chain rather than a package-aligned setup. The absence of outbound JavaScript networking does not reduce the concrete remot...

This is concrete install-time hostile behavior, not merely an administrative installer: it creates concealed privileged remote access and employs impersonation and trace removal. Absence...

The postinstall hook performs privileged, unconsented remote-access configuration and persistence with explicit camouflage and hiding behavior. These source facts support a block independ...

The automatic lifecycle chain performs concrete privileged persistence and remote-access-enabling changes, including stealth measures. This is malicious behavior, not a package-aligned in...

This is concrete unconsented postinstall host compromise behavior, not a package-aligned setup action. No network exfiltration is needed for the package to establish stealthy privileged r...