npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms tanksync@1.0.1 as malicious (MAL-2026-17209): Malicious code in tanksync (npm)

OpenSSF Malicious Packages via OSV confirms tanksync@1.0.0 as malicious (MAL-2026-17209): Malicious code in tanksync (npm)

Source proves automatic, unconsented replacement of a command in global Claude settings during npm postinstall. This meets the specified blocking rule even though the command has a packag...

OpenSSF Malicious Packages via OSV confirms ts-rand-sdk@1.0.4 as malicious (MAL-2026-14193): Malicious code in ts-rand-sdk (npm)

Source establishes unconsented postinstall mutation of a broad AI-agent control surface, meeting the supplied blocking policy. The mutation enables content telemetry globally rather than...

OpenSSF Malicious Packages via OSV confirms fs-commons@1.0.1 as malicious (MAL-2026-17301): Malicious code in fs-commons (npm)

OpenSSF Malicious Packages via OSV confirms common-fs@1.0.0 as malicious (MAL-2026-17300): Malicious code in common-fs (npm)

OpenSSF Malicious Packages via OSV confirms tanksync@1.0.4 as malicious (MAL-2026-17209): Malicious code in tanksync (npm)

The package implements automatic, persistent transmission of user session and workspace data after ordinary CLI use. This is concrete unconsented data exfiltration behavior, despite the a...

OpenSSF Malicious Packages via OSV confirms test-agency-assignment-02@1.0.5 as malicious (MAL-2026-17297): Malicious code in test-agency-assignment-02 (npm)

OpenSSF Malicious Packages via OSV confirms test-agency-assignment-01@1.0.5 as malicious (MAL-2026-17296): Malicious code in test-agency-assignment-01 (npm)

OpenSSF Malicious Packages via OSV confirms test-agency-assign@1.0.4 as malicious (MAL-2026-17295): Malicious code in test-agency-assign (npm)

OpenSSF Malicious Packages via OSV confirms @chatunity/baileys@3.2.0 as malicious (MAL-2026-17287): Malicious code in @chatunity/baileys (npm)

OpenSSF Malicious Packages via OSV confirms @selfpentest/eslint-pentest-plugin@1.0.0 as malicious (MAL-2026-17293): Malicious code in @selfpentest/eslint-pentest-plugin (npm)

OpenSSF Malicious Packages via OSV confirms @selfpentest/bin-confusion@1.0.0 as malicious (MAL-2026-17292): Malicious code in @selfpentest/bin-confusion (npm)

OpenSSF Malicious Packages via OSV confirms @rutxploit-sec/waves-button-poc@3.0.0 as malicious (MAL-2026-17290): Malicious code in @rutxploit-sec/waves-button-poc (npm)

OpenSSF Malicious Packages via OSV confirms @rutxploit-sec/waves-button-poc@2.0.0 as malicious (MAL-2026-17290): Malicious code in @rutxploit-sec/waves-button-poc (npm)

The package has a concrete, active path that exports raw request and response content to a third-party telemetry service after upstream errors. This is data exfiltration behavior, not nec...

The package contains automatic, default-on exports of diagnostic and telemetry data to external endpoints, including truncated upstream error text. This is a concrete unconsented data-exp...

The install-time hook, broad secret collection, obfuscation, and outbound submission form a concrete credential-exfiltration chain. The hidden recipient prevents any legitimate destinatio...