npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 471
Updated 23 Oct 2026, 20:49 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3507 blocks this version. The package @mimecast-ui/components was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3506 blocks this version. The package @mimecast-ui/charts was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3508 blocks this version. The package crypto-javascri was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3420 blocks this version. The package noon-contracts was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3410 blocks this version. The package @miurba/alcazaba was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3409 blocks this version. The package mw-filesystem-events-nodream was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3404 blocks this version. The package @matjp/dvi-decode was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3387 blocks this version. The package @gaia-codesearch/gaia-api-python was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3394 blocks this version. The package @gaia-codesearch/gaia-api-typescript was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3399 blocks this version. The package money-badger-open-rpc-test-bugbount was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3397 blocks this version. The package tecken was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3387 blocks this version. The package @gaia-codesearch/gaia-api-python was found to contain malicious code.