Loading npm security reports…
Skip to main contentMalware2 days ago 05:00Malware2 days ago 04:45Malware2 days ago 04:40Malware2 days ago 04:40
npm threat feed
npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 5
Updated 8 Oct 2026, 11:01 UTC. Ordered by latest scan.
@badzz88/baileys@8.6.0
OpenSSF Malicious Packages via OSV confirms @badzz88/baileys@8.6.0 as malicious (MAL-2026-17341): Malicious code in @badzz88/baileys (npm)
serpacksven1@1.0.6
OpenSSF Malicious Packages via OSV confirms serpacksven1@1.0.6 as malicious (MAL-2026-17626): Malicious code in serpacksven1 (npm)
internallib_v875@1.0.1
OpenSSF Malicious Packages via OSV confirms internallib_v875@1.0.1 as malicious (MAL-2026-17635): Malicious code in internallib_v875 (npm)
internallib_v30@1.0.1
OpenSSF Malicious Packages via OSV confirms internallib_v30@1.0.1 as malicious (MAL-2026-17633): Malicious code in internallib_v30 (npm)
internallib_v23@1.0.1
OpenSSF Malicious Packages via OSV confirms internallib_v23@1.0.1 as malicious (MAL-2026-17632): Malicious code in internallib_v23 (npm)
