Loading npm security reports…
Skip to main contentMalware2026-07-09 17:40Malware2026-07-09 17:40Malware2026-07-09 17:35Malware2026-07-09 17:35
npm threat feed
npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 390
Updated 20 Oct 2026, 16:17 UTC. Ordered by latest scan.
auth-state-service@1.6.16
OpenSSF/OSV malware advisory MAL-2026-6655 blocks this version. On require('auth-state-service'), the package loads lib/writer.js, which at top level attempts require('ssr-auth-sync') and...
common-tg-service@1.3.228
OpenSSF/OSV malware advisory MAL-2026-3288 blocks this version. Malicious npm package published by user `shetty123` as part of a Telegram account hijacking framework targeting Indian Tele...
notifier-utils@1.4.0
OpenSSF/OSV malware advisory MAL-2026-6923 blocks this version. The package presents itself as a pino-compatible logger (README, keywords, and a `module.exports.pino` alias mirror the pin...
openai-agents-helpers@1.1.1
OpenSSF/OSV malware advisory MAL-2026-6582 blocks this version. On `npm install`, scripts/postinstall.js automatically reads a broad set of installer-side identity and cloud-configuration...