npm security reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-12183 blocks this version. Package is a weaponized mass-mail / SMS spam and phishing toolkit distributed as an npm package. All 45 source files under...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-14040 blocks this version. package.json declares a postinstall script that imports src/hint.js and calls nativeBinaryPath(), which execFileSyncs preb...

OpenSSF/OSV malware advisory MAL-2026-13366 blocks this version. package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during `npm install`. The README describes...

OpenSSF/OSV malware advisory MAL-2026-13366 blocks this version. package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during `npm install`. The README describes...

OpenSSF/OSV malware advisory MAL-2026-13366 blocks this version. package.json declares a postinstall script that spawns vendor/gridgen-linux-x64 during `npm install`. The README describes...

OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...

OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...

OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...

OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...

OpenSSF/OSV malware advisory MAL-2026-13926 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13927 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-13997 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code