npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 510
Updated 23 Oct 2026, 20:30 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
OpenSSF/OSV malware advisory MAL-2026-12314 blocks this version. install.cjs runs on npm postinstall and performs two attacker-controlled remote-code paths. First, it spawns osascript wit...
The malicious chain is source-confirmed and import-triggered; the absence of an npm lifecycle hook does not mitigate it. Remote payload execution is concealed behind a benign package entr...
Direct source inspection confirms automatic install-time credential/environment harvesting and external exfiltration. This is concrete malicious behavior.
This is a concrete import-time staged payload loader and executor, unrelated to the advertised UI toolkit. The absence of install hooks does not mitigate runtime arbitrary code execution...
The import-time remote binary drop-and-execute chain is concrete and unrelated to the package's stated UI purpose. Absence of lifecycle hooks does not mitigate execution on normal import.
This is a concrete import-time remote payload execution chain unrelated to the declared UI-grid functionality. The absence of lifecycle hooks does not mitigate execution on ordinary packa...
This is a concrete import-time remote-code-execution chain unrelated to the advertised UI input package. The duplicated telemetry implementation contains the same downloader pattern but i...
The package has a concrete import-time remote-code-execution chain unrelated to its declared UI-icon purpose. The elaborate telemetry module duplicates the same payload-loader pattern but...
This is a concrete import-time staged-payload execution chain unrelated to the advertised UI toolkit. It enables an attacker controlling the endpoints or DNS records to execute arbitrary...
This is a concrete import-time staged-payload loader with detached execution, not telemetry. Absence of an npm lifecycle hook does not mitigate runtime compromise on normal import.
The package's public entrypoint automatically executes a concealed downloader and detached payload launcher. The behavior is concrete, reachable on import, and unrelated to the stated pic...
This is concrete import-time remote payload staging and execution, disguised as telemetry compatibility code. No lifecycle hook is needed for the attack to reach consumers.
Direct source inspection confirms import-time remote payload retrieval and execution, not merely telemetry behavior. No lifecycle hook is needed because the declared main entrypoint activ...
This is an import-time remote payload execution chain unrelated to the declared banner abstraction. No install hook is needed because ordinary package use triggers it.
This is a concrete, automatically reachable remote-code-execution chain, not normal telemetry. The absence of an install hook does not mitigate execution on ordinary package import.
This is a concrete import-time remote payload execution chain unrelated to the documented abstraction API. The lack of lifecycle hooks does not mitigate execution on ordinary package import.
The package's main entrypoint performs import-time download-and-execute behavior unrelated to its stated reactive-store purpose. No lifecycle hook is needed because ordinary package use t...
OpenSSF/OSV malware advisory MAL-2026-13323 blocks this version. On require, index.js loads _ext.js which detects platform, constructs C2 hostnames by joining split string fragments (e.g....
This is concrete import-time remote code execution, not package-aligned telemetry. No lifecycle hook is needed because requiring the declared main entrypoint activates the loader.