npm security reports, with evidence.

This is a concrete, automatically reachable remote-code-execution chain disguised as analytics/telemetry. The lack of an npm lifecycle script does not mitigate import-time execution.

This is concrete import-time remote code execution, not legitimate telemetry: the fetched opaque payload is directly executed without verification. No install hook is needed because ordin...

The package's import-time loader implements a concrete remote code execution chain with obfuscated infrastructure and no legitimate package-facing need for native payload execution. Absen...

The package contains a concrete, reachable import-time downloader-and-executor, independent of any lifecycle script or user API call. The telemetry implementation repeats the same native-...

This is a concrete, covert import-time remote-code-execution chain, not legitimate telemetry. The obfuscated rotating infrastructure and duplicate payload-loader logic reinforce malicious...

Source establishes an import-time remote payload download-and-execute chain. The absence of an npm lifecycle hook does not mitigate the reachable runtime execution.

This is a concrete import-time staged payload delivery and execution chain, unrelated to the declared infrastructure-utilities package purpose. Absence of an install hook does not mitigat...

The package implements an import-triggered remote payload execution chain with stealthy temporary files, detached processes, and fallback infrastructure. This is concrete malicious behavi...

The entrypoint creates an import-time remote binary downloader and detached executor; this is concrete malware behavior despite no install lifecycle hook.

Source inspection confirms a reachable, automatic downloader-and-executor with no user opt-in. The lack of an npm lifecycle hook does not mitigate execution when consumers import the pack...

The concrete import-time staged payload chain is independently confirmed in source. Absence of an npm lifecycle hook does not mitigate execution on normal package use.

The behavior is concrete and automatically triggered by npm postinstall, not merely an explicit setup command. It persists a downloaded MCP capability across multiple foreign AI clients.

OpenSSF/OSV malware advisory MAL-2026-13630 blocks this version. This package impersonates the @rbxts/services Roblox typings library and re-exports its public API in index.js as cover. I...

Source inspection confirms a disguised challenge page whose callback performs an obfuscated external redirect with query forwarding. Although it has no install hook, this is concrete mali...

OpenSSF/OSV malware advisory MAL-2026-13627 blocks this version. Package published under the @nestjs-passport scope, which resembles the official @nestjs/jwt and @nestjs/passport packages...

OpenSSF/OSV malware advisory MAL-2026-13627 blocks this version. Package published under the @nestjs-passport scope, which resembles the official @nestjs/jwt and @nestjs/passport packages...

Direct inspection confirms a concrete, obfuscated query-parameter exfiltration and redirect chain in the only shipped entrypoint. The absence of npm lifecycle hooks does not remove the ma...

OpenSSF/OSV malware advisory MAL-2026-11093 blocks this version. The package's postinstall lifecycle hook runs `node index.js`, which issues an HTTPS GET to a hardcoded Burp Collaborator...

OpenSSF/OSV malware advisory MAL-2026-11093 blocks this version. The package's postinstall lifecycle hook runs `node index.js`, which issues an HTTPS GET to a hardcoded Burp Collaborator...

OpenSSF/OSV malware advisory MAL-2026-13624 blocks this version. This package is an automated 'DepUp' republish of memfs whose lib/index.js and lib/index.d.ts have been stripped of the up...

OpenSSF/OSV malware advisory MAL-2026-13623 blocks this version. @depup/aws-sdk__credential-provider-process is a republished fork of the official @aws-sdk/credential-provider-process pac...