npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 520
Updated 24 Oct 2026, 03:26 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-12123 blocks this version. @zzzgenesis00/solana-spl-token@0.4.0 impersonates the Solana SPL Token package and runs postinstall.js on `npm install`. T...
OpenSSF/OSV malware advisory MAL-2026-12122 blocks this version. The package's postinstall.js lifecycle script runs on `npm install` and collects installer-side secrets: it enumerates a h...
OpenSSF/OSV malware advisory MAL-2026-12121 blocks this version. @zzzgenesis00/hd-key-generator ships a postinstall.js that runs automatically on npm install. It enumerates ~/.ssh, ~/.npm...
OpenSSF/OSV malware advisory MAL-2026-12120 blocks this version. On npm install, postinstall.js reads installer-owned secret material — ~/.ssh entries, ~/.npmrc, ~/.gitconfig — and iterat...
OpenSSF/OSV malware advisory MAL-2026-12118 blocks this version. @zzzgenesis00/bitcoin-lib 6.1.7 runs a postinstall.js at npm install time that harvests installer-owned secrets and exfilt...
OpenSSF/OSV malware advisory MAL-2026-12119 blocks this version. This package is a typosquat of the bitcoinjs-wallet ecosystem. Its index.js is a thin passthrough while the malicious beha...
OpenSSF/OSV malware advisory MAL-2026-12125 blocks this version. @zzzgenesis00/web3-utils-crypto ships a postinstall.js that runs automatically on npm install and harvests installer-side...
OpenSSF/OSV malware advisory MAL-2026-12124 blocks this version. This package impersonates the legitimate `tronweb` SDK (author field spoofed as 'tronprotocol') and runs a malicious posti...
The package has a concrete install-time security-bypass chain for a remote native payload, not merely noisy static primitives. Hash pinning does not mitigate the intentional evasion of pl...
Source inspection confirms an unconsented postinstall mutation of consumer AI-agent instruction files and build controls. Although no exfiltration or remote execution was found, this meet...
Direct source inspection confirms a documented consent gate that is bypassed for headless execution while telemetry remains enabled and sends identifiable Salesforce metadata. This is con...
The source establishes an import-time, obfuscated remote payload chain with direct eval and detached process execution. Absence of npm lifecycle hooks does not mitigate execution when the...
Direct source inspection confirms deliberate consumer-build tampering and a delayed remote-triggered blocking UI. The lack of npm lifecycle hooks limits install-time impact but does not r...
OpenSSF/OSV malware advisory MAL-2026-11710 blocks this version. npm/@or-sdk/library-types-v2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11706 blocks this version. npm/@or-sdk/library is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud:...
OpenSSF/OSV malware advisory MAL-2026-11711 blocks this version. npm/@or-sdk/lookup is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud:...
OpenSSF/OSV malware advisory MAL-2026-11679 blocks this version. npm/@or-sdk/card-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11692 blocks this version. npm/@or-sdk/files is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud: H...
OpenSSF/OSV malware advisory MAL-2026-11700 blocks this version. npm/@or-sdk/idw-public is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hul...
OpenSSF/OSV malware advisory MAL-2026-11690 blocks this version. npm/@or-sdk/druid is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud: H...
OpenSSF/OSV malware advisory MAL-2026-11726 blocks this version. npm/@or-sdk/sku-builder is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hu...
OpenSSF/OSV malware advisory MAL-2026-11733 blocks this version. npm/@or-sdk/tickets is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud:...
OpenSSF/OSV malware advisory MAL-2026-11720 blocks this version. npm/@or-sdk/pgsql is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud: H...
OpenSSF/OSV malware advisory MAL-2026-11723 blocks this version. npm/@or-sdk/queue-manager is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-...
OpenSSF/OSV malware advisory MAL-2026-11738 blocks this version. npm/@or-sdk/web-search is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hul...