Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

npm security reports and threat intelligence — page 419 | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

npm threat feed

npm advisory reports, with evidence.

Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.

Source

All sources Public advisories LPM Firewall detections

Category

All categories Malware Credential / data exfiltration Remote execution AI-agent control-surface policy Dependency confusion Dependency script approvals Persistence / destructive behavior

Security reports — page 419

Updated 21 Oct 2026, 09:21 UTC. Ordered by latest scan.

winston-middleware@0.3.1

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.2.4

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.2.3

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.2.2

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.2.1

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

winston-middleware@0.2.0

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.3

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.2

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.1

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

winston-middleware@0.1.0

OpenSSF/OSV malware advisory MAL-2026-7440 blocks this version.

Malware2026-07-09 09:50

symphony-core@99.9.0

OpenSSF/OSV malware advisory MAL-2026-2608 blocks this version. The package symphony-core was found to contain malicious code.

Malware2026-07-09 09:50

rngularjs@8.7.6

OpenSSF/OSV malware advisory MAL-2026-7404 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7392 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7417 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7416 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7415 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7414 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7413 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7412 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7411 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7410 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7408 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7407 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7406 blocks this version.

Malware2026-07-09 09:50

OpenSSF/OSV malware advisory MAL-2026-7403 blocks this version.

Malware2026-07-09 09:50

showing 10451-10475 of 16617

LPM.dev Registry

© 2026 LPM