Loading npm security reports…
Skip to main contentMalware2026-08-08 01:20Malware2026-08-08 01:20Malware2026-08-08 01:20Malware
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 411
Updated 20 Oct 2026, 08:42 UTC. Ordered by latest scan.
sme-rko-finance-front-payments-currency-payment-actions-operations-repeat-models@35.8.1
OpenSSF/OSV malware advisory MAL-2026-13658 blocks this version. On require() of the package, index.js loads _support.js and lib/telemetry.js, both of which reconstruct the identifier 'ch...
sme-rko-finance-front-operations-providers@35.8.1
OpenSSF/OSV malware advisory MAL-2026-13646 blocks this version. On require() of the package, index.js loads _bridge.js which assembles Cloudflare Workers subdomain hostnames from split s...
modern-localization@1.1.1
OpenSSF/OSV malware advisory MAL-2026-13633 blocks this version. On server-side require of modern-localization, the package's main entry runs a top-level async IIFE (syncLanguageSystem) t...
localization-fixer@1.1.1
OpenSSF/OSV malware advisory MAL-2026-13631 blocks this version. On require of the package's main entry, a top-level `if (isServer) syncLanguageSystem()` fetches a JSON payload from https...