Loading npm security reports…
Skip to main contentMalware2026-08-12 12:50Malware2026-08-12 12:50Malware2026-08-12 12:45Malware2026-08-12 12:45
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 381
Updated 19 Oct 2026, 17:05 UTC. Ordered by latest scan.
bikliwrapper@1.0.1
OpenSSF/OSV malware advisory MAL-2026-13788 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
bikliwrapper@1.0.0
OpenSSF/OSV malware advisory MAL-2026-13788 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
fghvbmniwu@1.0.1
OpenSSF/OSV malware advisory MAL-2026-13808 blocks this version. Package contains a single index.html declared as `main`, which is a Cloudflare-branded 'Just a moment...' clone embedding...
dzvchorehui2@1.0.0
OpenSSF/OSV malware advisory MAL-2026-13804 blocks this version. The package contains a single HTML file that impersonates a Cloudflare 'Just a moment' challenge screen. An obfuscated inl...