Loading npm security reports…
Skip to main contentMalware2026-08-06 09:50Malware2026-08-06 09:50Malware2026-08-06 09:50Malware2026-08-06 09:50
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 455
Updated 21 Oct 2026, 09:20 UTC. Ordered by latest scan.
@agenthub-ai/agent@0.12.2
OpenSSF/OSV malware advisory MAL-2026-12312 blocks this version. Package installs a long-running daemon that opens a persistent WebSocket to wss://agenthub-agent.fyenet.com and dispatches...
@agenthub-ai/agent@0.10.1
OpenSSF/OSV malware advisory MAL-2026-12312 blocks this version. Package installs a long-running daemon that opens a persistent WebSocket to wss://agenthub-agent.fyenet.com and dispatches...
@agenthub-ai/agent@0.9.5
OpenSSF/OSV malware advisory MAL-2026-12312 blocks this version. Package installs a long-running daemon that opens a persistent WebSocket to wss://agenthub-agent.fyenet.com and dispatches...
@agenthub-ai/agent@0.9.4
OpenSSF/OSV malware advisory MAL-2026-12312 blocks this version. Package installs a long-running daemon that opens a persistent WebSocket to wss://agenthub-agent.fyenet.com and dispatches...