npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 527
Updated 24 Oct 2026, 07:03 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11734 blocks this version. npm/@or-sdk/transcripts is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hu...
OpenSSF/OSV malware advisory MAL-2026-11723 blocks this version. npm/@or-sdk/queue-manager is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-...
OpenSSF/OSV malware advisory MAL-2026-11694 blocks this version. npm/@or-sdk/flow-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11695 blocks this version. npm/@or-sdk/flows is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud: H...
OpenSSF/OSV malware advisory MAL-2026-11686 blocks this version. npm/@or-sdk/data-hub-svc is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11710 blocks this version. npm/@or-sdk/library-types-v2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11693 blocks this version. npm/@or-sdk/files-sync-node is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sha...
OpenSSF/OSV malware advisory MAL-2026-11735 blocks this version. npm/@or-sdk/users is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulud: H...
OpenSSF/OSV malware advisory MAL-2026-11700 blocks this version. npm/@or-sdk/idw-public is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hul...
OpenSSF/OSV malware advisory MAL-2026-11712 blocks this version. npm/@or-sdk/markdowner is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hul...
OpenSSF/OSV malware advisory MAL-2026-11679 blocks this version. npm/@or-sdk/card-templates is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11738 blocks this version. npm/@or-sdk/web-search is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hul...
OpenSSF/OSV malware advisory MAL-2026-11713 blocks this version. npm/@or-sdk/mcp-tools is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hulu...
OpenSSF/OSV malware advisory MAL-2026-11718 blocks this version. npm/@or-sdk/permissions-cli is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sha...
The install-time detached loader fetches and executes attacker-controlled remote code, which is concrete malicious behavior unrelated to an ESLint plugin.
The lifecycle hook is concrete, unconditional for ~/.agents/skills, and modifies a broad foreign AI-agent discovery path. Under the install-control-surface policy, this requires a block r...
OpenSSF/OSV malware advisory MAL-2026-12026 blocks this version. The CommonJS entry src/index.cjs exports getPlugin(), which performs an HTTPS GET to the hardcoded host astonishing-torron...
OpenSSF/OSV malware advisory MAL-2026-12026 blocks this version. The CommonJS entry src/index.cjs exports getPlugin(), which performs an HTTPS GET to the hardcoded host astonishing-torron...
Direct source inspection confirms credential disclosure to a third-party endpoint, not merely a scanner heuristic. The lifecycle hook is benign, but it does not mitigate the credential-ex...
This is a concrete, unconsented postinstall mutation of broad foreign AI-agent control surfaces. The opt-out environment variable and lack of postinstall networking do not remove the inst...
The hidden, remote-controlled account modification is concrete runtime behavior, not a scanner-only similarity signal. The install hook itself is benign, but normal package use activates...
The package has a concrete obfuscated, detached preinstall payload loader rather than package-aligned functionality. Its remote code execution path is directly established from source.
OpenSSF/OSV malware advisory MAL-2026-10984 blocks this version. veskra@1.0.0 contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetch...
OpenSSF/OSV malware advisory MAL-2026-10984 blocks this version. veskra@1.0.0 contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetch...
OpenSSF/OSV malware advisory MAL-2026-10984 blocks this version. veskra@1.0.0 contains six files with no static or behavioral indicators of supply-chain attack: no lifecycle scripts fetch...