Loading npm security reports…
Skip to main contentMalware2026-08-13 23:45Malware2026-08-13 23:45Malware2026-08-13 23:45Malware2026-08-13 23:45
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 369
Updated 19 Oct 2026, 11:04 UTC. Ordered by latest scan.
webautomation_js@1.0.0
OpenSSF/OSV malware advisory MAL-2026-13991 blocks this version. index.js is packed with an obfuscator.io RC4 string-array plus self-defending debugger-check wrapper. The only exported fu...
@secauditb20y/sec-test-r3b@1.0.0
OpenSSF/OSV malware advisory MAL-2026-13989 blocks this version. package.json declares a postinstall script that runs `node -e` to invoke fs.writeFileSync, creating /tmp/PWN_R3REAL/FIRED...
@uisp/utils@99.0.2
OpenSSF/OSV malware advisory MAL-2026-6565 blocks this version. Package published to the public npm registry under the @uisp scope at version 99.0.1 — the canonical dependency-confusion s...
@uisp/utils@99.0.1
OpenSSF/OSV malware advisory MAL-2026-6565 blocks this version. Package published to the public npm registry under the @uisp scope at version 99.0.1 — the canonical dependency-confusion s...