npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 447
Updated 23 Oct 2026, 07:21 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-6757 blocks this version. On import of the server entry module, a top-level try block detaches a shell process that (1) appends an attacker-controlle...
OpenSSF/OSV malware advisory MAL-2026-6757 blocks this version. On import of the server entry module, a top-level try block detaches a shell process that (1) appends an attacker-controlle...
OpenSSF/OSV malware advisory MAL-2026-6757 blocks this version. On import of the server entry module, a top-level try block detaches a shell process that (1) appends an attacker-controlle...
OpenSSF/OSV malware advisory MAL-2026-6790 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-6790 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-6980 blocks this version. domains-billing-types@99.91.1 executes `node index.js` from its `postinstall` lifecycle script. On install, index.js reads...
OpenSSF/OSV malware advisory MAL-2026-6982 blocks this version. Package name and metadata impersonate the Paysafe payments SDK (description 'Paysafe Card payment processing', repository '...
OpenSSF/OSV malware advisory MAL-2026-6947 blocks this version. On `npm install`, package.json's postinstall executes dist/setup.js and dist/postinstall.js. The scripts read installer-sid...
OpenSSF/OSV malware advisory MAL-2026-6947 blocks this version. On `npm install`, package.json's postinstall executes dist/setup.js and dist/postinstall.js. The scripts read installer-sid...
OpenSSF/OSV malware advisory MAL-2026-6947 blocks this version. On `npm install`, package.json's postinstall executes dist/setup.js and dist/postinstall.js. The scripts read installer-sid...
OpenSSF/OSV malware advisory MAL-2026-6947 blocks this version. On `npm install`, package.json's postinstall executes dist/setup.js and dist/postinstall.js. The scripts read installer-sid...
OpenSSF/OSV malware advisory MAL-2026-6947 blocks this version. On `npm install`, package.json's postinstall executes dist/setup.js and dist/postinstall.js. The scripts read installer-sid...
OpenSSF/OSV malware advisory MAL-2026-6947 blocks this version. On `npm install`, package.json's postinstall executes dist/setup.js and dist/postinstall.js. The scripts read installer-sid...
OpenSSF/OSV malware advisory MAL-2026-6949 blocks this version. The package 'vps-adapter-core' is a purpose-built malware package published by the npm account 'srm0rgan' (srm0rgan@proton....
OpenSSF/OSV malware advisory MAL-2026-6949 blocks this version. The package 'vps-adapter-core' is a purpose-built malware package published by the npm account 'srm0rgan' (srm0rgan@proton....
OpenSSF/OSV malware advisory MAL-2026-6949 blocks this version. The package 'vps-adapter-core' is a purpose-built malware package published by the npm account 'srm0rgan' (srm0rgan@proton....
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...
OpenSSF/OSV malware advisory MAL-2026-6981 blocks this version. paperclip-adapter-helpers@1.0.7 executes a credential-theft and C2 backdoor automatically on import. The package's main re-...