Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Updated 21 Oct 2026, 21:05 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5629 blocks this version. The package name `sass-formats` is one character-edit away from the popular `sass-formatter` package and reuses its origina...
OpenSSF/OSV malware advisory MAL-2026-6388 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-5259 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-5676 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-5259 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code