Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Updated 19 Oct 2026, 06:27 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...
OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...
OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...
OpenSSF/OSV malware advisory MAL-2026-14039 blocks this version. Package presents itself as a CDN static-asset distribution library but ships 19 pre-compiled arm64 Mach-O binaries under 0...