npm advisory reports, with evidence.

The package contains concrete covert payload extraction and user-directory executable placement activated on import. The delayed watcher and carrier deletion reinforce malicious intent de...

The package contains an automatic install hook connected to active credential harvesting and outbound transmission. This is concrete malicious data exfiltration.

The package contains an import-triggered, detached remote payload loader that executes server-authorized JavaScript. This is concrete remote code execution, not ordinary item validation.

OpenSSF Malicious Packages via OSV confirms turbo-ws@1.0.0 as malicious (MAL-2026-16440): Malicious code in turbo-ws (npm)

Active, concealed execution of an image-carried PowerShell command occurs on normal package use. The hidden detached launcher is concrete malware behavior.

The automatic lifecycle hook combines deliberate obfuscation, staged payload handling, filesystem writes, and process execution. This meets the install-hook abuse boundary for blocking pu...

Hidden extraction and detached execution of an opaque PowerShell payload is concrete malware behavior, not environment configuration functionality. Automatic activation from both runtime...

The package contains a concrete automatic install-time collection and outbound transmission of local system identifiers. This is malicious data exfiltration rather than ordinary package s...

The package contains and automatically activates a hidden encoded-PowerShell launcher from both its library and CLI entrypoints. This is concrete malicious execution behavior unrelated to...

The automatic, heavily obfuscated preinstall loader has concealed payload-handling and child-process capability, which is concrete install-hook abuse. The normal SDK entrypoint does not j...

The package contains an automatic, deliberately obfuscated install hook that reconstructs and launches a hidden payload. This is concrete install-hook abuse and is not justified by the ex...

The package contains an automatic preinstall hook that collects local host metadata and transmits it to a hard-coded third-party endpoint. This is concrete install-time data exfiltration.

OpenSSF Malicious Packages via OSV confirms @bb1ptest23/test-paket@1.0.3 as malicious (MAL-2026-17201): Malicious code in @bb1ptest23/test-paket (npm)

The lifecycle hook performs covert executable deployment and detached execution during installation. This is concrete malicious install-hook abuse.

The active executable performs credential and local-file collection followed by a network send. Its npm command name makes the behavior especially likely to be triggered through command c...

Automatic install-time host-identifier transmission to an external IP is a concrete data-exfiltration behavior. The duplicated import-time request reinforces that this is active behavior...

The preinstall hook unconditionally harvests hostname and username and sends them over HTTP during install, with errors silenced, while presenting the package as @waves/icons. Self-descri...

The main module is an import-time loader that stealthily executes a fixed disguised executable path after waiting for a companion dependency to place it. That behavior is unrelated to the...

The published entrypoint itself launches a concealed executable from a fixed user-profile path, independent of the documented binary runner API. That import-time hidden spawn is concrete...

The package contains an automatic preinstall hook that harvests machine identity fields and sends them over HTTP. This is concrete install-hook abuse and is not necessary for the declared...