Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 21 Oct 2026, 02:27 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5456 blocks this version. The package exports an empty object (`module.exports = {}`) and has no functionality of its own. Its only substantive effec...
OpenSSF/OSV malware advisory MAL-2026-7419 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-7434 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-7420 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-7437 blocks this version.