Loading npm security reports…
Skip to main contentMalware2026-08-07 00:35Malware2026-08-07 00:35Malware2026-08-07 00:35Malware2026-08-07 00:35
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 424
Updated 20 Oct 2026, 14:55 UTC. Ordered by latest scan.
diezyyasha-baileys@8.6.62
OpenSSF/OSV malware advisory MAL-2026-13443 blocks this version. diezyyasha-baileys is a fork of the Baileys WhatsApp library that contains an obfuscated network destination in lib/Socket...
diezyyasha-baileys@8.6.61
OpenSSF/OSV malware advisory MAL-2026-13443 blocks this version. diezyyasha-baileys is a fork of the Baileys WhatsApp library that contains an obfuscated network destination in lib/Socket...
diezyyasha-baileys@8.6.59
OpenSSF/OSV malware advisory MAL-2026-13443 blocks this version. diezyyasha-baileys is a fork of the Baileys WhatsApp library that contains an obfuscated network destination in lib/Socket...
ach-detail@99.0.1
OpenSSF/OSV malware advisory MAL-2026-12334 blocks this version. The npm package ach-detail@99.0.1 ships a preinstall lifecycle script (scripts/preinstall.js) that runs automatically on `...