npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 520
Updated 25 Oct 2026, 02:01 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5148 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5144 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5143 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5134 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5138 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5135 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5136 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5137 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5126 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5119 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5147 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5140 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5139 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5133 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5142 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5146 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5148 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5141 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5145 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5144 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5143 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5134 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5138 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5135 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...
OpenSSF/OSV malware advisory MAL-2026-5136 blocks this version. Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared...