npm advisory reports, with evidence.

The main module is an import-time loader that stealthily executes a fixed disguised executable path after waiting for a companion dependency to place it. That behavior is unrelated to the...

The published entrypoint itself launches a concealed executable from a fixed user-profile path, independent of the documented binary runner API. That import-time hidden spawn is concrete...

The package contains an automatic preinstall hook that harvests machine identity fields and sends them over HTTP. This is concrete install-hook abuse and is not necessary for the declared...

This package contains an active preinstall payload intended to run when a dependency-confusion target installs it. The automatic collection and network action make this a blockable instal...

The active entrypoint implements unsolicited browser credential and data collection followed by transmission to an unrelated external endpoint. This is concrete credential and data exfilt...

Importing the package runs an obfuscated loader that shells out through execSync and prepares host and username collection plus an axios send. That is concrete remote command execution hi...

Import of the published entrypoint is a dropper: it decrypts a concealed payload with a hardcoded key and writes an executable while deleting the staging file. The image-conversion API do...

Import-time code hides an AES dropper behind an image-conversion API and plants a mode-0700 executable from a concealed temp payload. That is concrete malware behavior even though this fi...

OpenSSF Malicious Packages via OSV confirms @alphaspace/core@99.0.3 as malicious (MAL-2026-17169): Malicious code in @alphaspace/core (npm)

The published main module immediately runs an obfuscated payload that loads shell execution, filesystem access, and an HTTP client. That is hidden import-time attack behavior, not a logge...

OpenSSF Malicious Packages via OSV confirms cma-self-hosted-sandbox-cf@1.0.0 as malicious (MAL-2026-17190): Malicious code in cma-self-hosted-sandbox-cf (npm)

The published plugin entries hide a fetch of option-derived content and execute it with Node require during ordinary cryptoPlugin setup. That is remote code execution, separate from the l...

Automatic install hooks harvest credentials and phone home to an unrelated oast.site host, which is concrete install-time malware. The empty library entry and local-only comments do not r...

The package embeds a concealed, configuration-derived remote code execution path in its runtime entrypoints. This is concrete attack behavior beyond the declared encryption feature.

The package performs unsolicited external callbacks during installation through a postinstall hook. This is concrete dependency-confusion install tracking and warrants blocking.

The install-triggered, obfuscated DNS request transmits host and project metadata to an unrelated external domain. This is concrete covert data exfiltration, not a normal design-system ru...

The launcher, overlay, screen grabber, and browser-cookie decryptor are concrete stealth and credential-theft behavior under a false package description. Install does not auto-start them,...

This is an active, obfuscated install-time metadata exfiltration path. It has no necessary relationship to a global-header component.

The published socket path silently subscribes the connected WhatsApp account to a publisher-selected newsletter, which is concrete unconsented account abuse. The obfuscated timer, swallow...

The published entrypoint automatically hooks every local DevTools page and sends captured page and editor text, with an embedded key, to a hardcoded third-party worker while certificate c...

OpenSSF Malicious Packages via OSV confirms chai-as-indexed@7.2.8 as malicious (MAL-2026-16293): Malicious code in chai-as-indexed (npm)