Loading npm security reports…
Skip to main contentMalware2026-08-07 00:35Malware2026-08-07 00:35Malware2026-08-07 00:35Malware2026-08-07 00:35
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 427
Updated 20 Oct 2026, 16:19 UTC. Ordered by latest scan.
vanexa-agent@1.1.31
OpenSSF/OSV malware advisory MAL-2026-10751 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. When the user runs `vanexa-agent start`, the daemon...
vanexa-agent@1.1.27
OpenSSF/OSV malware advisory MAL-2026-10751 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. When the user runs `vanexa-agent start`, the daemon...
vanexa-agent@1.1.26
OpenSSF/OSV malware advisory MAL-2026-10751 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. When the user runs `vanexa-agent start`, the daemon...
vanexa-agent@1.1.25
OpenSSF/OSV malware advisory MAL-2026-10751 blocks this version. When the user runs `vanexa-agent start`, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay a...