Loading npm security reports…
Skip to main contentMalware2026-08-05 14:00Malware2026-08-05 14:00Malware2026-08-05 14:00Malware2026-08-05 14:00
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 499
Updated 22 Oct 2026, 12:25 UTC. Ordered by latest scan.
sn-flow-client@1.0.2
OpenSSF/OSV malware advisory MAL-2024-9443 blocks this version. package.json declares a preinstall hook ("preinstall": "node index.js") that runs index.js automatically on npm install. in...
voicemail@1.0.1
OpenSSF/OSV malware advisory MAL-2026-12496 blocks this version. package.json declares both preinstall and postinstall lifecycle scripts that invoke curl against a hardcoded webhook.site...
vscode-designer-14@14.0.1
OpenSSF/OSV malware advisory MAL-2026-12497 blocks this version. package.json declares a preinstall hook that runs index.js on npm install. index.js collects the installer's hostname, use...
swiper_angular@5.9999.1
OpenSSF/OSV malware advisory MAL-2026-11065 blocks this version. Package name typosquats swiper/swiper-angular at implausible version 5.9999.1. The preinstall.js script runs at install ti...