Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Updated 9 Oct 2026, 10:22 UTC. Ordered by latest scan.
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.9 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.8 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.7 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @nyzzpediaa/baileys-new@1.0.6 as malicious (MAL-2026-17371): Malicious code in @nyzzpediaa/baileys-new (npm)
OpenSSF Malicious Packages via OSV confirms @ostyado/baileys@2.0.9 as malicious (MAL-2026-17372): Malicious code in @ostyado/baileys (npm)