Loading npm security reports…
Skip to main contentMalware2026-08-06 13:55Malware2026-08-06 13:55Malware2026-08-06 13:55Malware2026-08-06 13:55
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 445
Updated 21 Oct 2026, 02:06 UTC. Ordered by latest scan.
@yeaft/webchat-agent@1.0.300
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...
@yeaft/webchat-agent@1.0.298
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...
@yeaft/webchat-agent@1.0.296
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...
@yeaft/webchat-agent@1.0.295
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...