Loading npm security reports…
Skip to main contentMalware2026-09-30 05:05Malware2026-09-30 05:05Malware2026-09-30 05:05Malware2026-09-30 05:05
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 49
Updated 9 Oct 2026, 16:53 UTC. Ordered by latest scan.
contoso-login-sim-loader@1.0.1
OpenSSF Malicious Packages via OSV confirms contoso-login-sim-loader@1.0.1 as malicious (MAL-2026-17322): Malicious code in contoso-login-sim-loader (npm)
epic-ue-spotlight@0.0.1-security
OpenSSF Malicious Packages via OSV confirms epic-ue-spotlight@0.0.1-security as malicious (MAL-2025-49207): Malicious code in epic-ue-spotlight (npm)
epic-ue-shared@0.0.1-security
OpenSSF Malicious Packages via OSV confirms epic-ue-shared@0.0.1-security as malicious (MAL-2025-49206): Malicious code in epic-ue-shared (npm)
epic-ue-newsletter@0.0.1-security
OpenSSF Malicious Packages via OSV confirms epic-ue-newsletter@0.0.1-security as malicious (MAL-2025-49205): Malicious code in epic-ue-newsletter (npm)
