npm security reports, with evidence.

The package contains a default-enabled path that transfers environment secret values to a package-controlled external endpoint during normal GitHub Actions execution. No install hook is r...

The package has no install-time attack, but its obfuscated runtime silently exfiltrates substantial user source content on ordinary tool failures. That is a concrete privacy and data-exfi...

Source inspection confirms a concealed remote-response-to-Function execution chain, not merely suspicious primitives. Absence of lifecycle hooks limits the trigger but does not remove the...

The concrete postinstall behavior satisfies the blocking policy for unconsented mutation of broad foreign AI-agent control surfaces. No network exfiltration is needed for this install-tim...

Source establishes a concrete, default-enabled remote transmission of environment secrets during CI execution. The lack of an install hook does not mitigate this runtime credential-exfilt...

This is a concrete, unconsented postinstall takeover of a broad user-level AI-agent credential/control surface, not merely a runtime feature. The launcher itself is local, but it does not...

This is a concrete, unconsented postinstall mutation of an AI-agent credential/control surface, including destructive replacement of existing configuration. The behavior is not required t...

The main entrypoint performs unconditional remote payload retrieval and dynamic execution. This is a concrete remote-code-execution chain, not a benign network use.

The hard-coded receiver and enabled-by-default periodic export establish concrete unconsented data exfiltration. The lack of an npm install hook does not negate runtime behavior after the...

This is a concrete broad AI-agent control-surface takeover chain, not merely a bootstrapper: it modifies home and project instruction files and executes a remotely obtained native daemon....

Source inspection confirms an import-time detached payload launcher and an obfuscated remote dynamic-code loader. The absence of lifecycle hooks does not mitigate runtime compromise on im...

The runtime-reachable, obfuscated blockchain-resolved loader executes attacker-supplied code and spawns a detached process. The benign postinstall hook does not mitigate this independent...

OpenSSF/OSV malware advisory MAL-2026-13706 blocks this version. Package neverthrow-js@2.0.0 is a typosquat of the legitimate neverthrow library. package.json declares postinstall: node./...

OpenSSF/OSV malware advisory MAL-2026-13691 blocks this version. @rblxts/services is a typosquat of @rbxts/services. Its scripts/postinstall.js is heavily obfuscated: module names ('fs','...

OpenSSF/OSV malware advisory MAL-2026-13630 blocks this version. This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. I...

OpenSSF/OSV malware advisory MAL-2026-13630 blocks this version. This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. I...

OpenSSF/OSV malware advisory MAL-2026-13675 blocks this version. Package statist-browser-typed-client-eventea.projects.tdevice@0.0.1 contains only two files and shows no code performing c...

OpenSSF/OSV malware advisory MAL-2026-13673 blocks this version. LPM AI assessed this version as clean; the assessments disagree. Package contains only 2 files and no code patterns indica...

OpenSSF/OSV malware advisory MAL-2026-13702 blocks this version. The package presents itself as a chai-related utility (name `chai-as-map`, keywords `logger`/`stream`/`json`, description...

OpenSSF/OSV malware advisory MAL-2026-11154 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. xerohub-discord-voice-v2 advertises itself as a Disc...

OpenSSF/OSV malware advisory MAL-2026-13699 blocks this version. The package presents itself as a chai plugin (name resembles chai-as-promised, manifest description references chai assert...