npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 548
Updated 24 Oct 2026, 18:34 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11776 blocks this version. npm/@ornikar/slate-react-fork is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11760 blocks this version. npm/@ornikar/jest-config-react-native is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04...
OpenSSF/OSV malware advisory MAL-2026-11755 blocks this version. npm/@ornikar/eslint-plugin-ornikar is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (t...
OpenSSF/OSV malware advisory MAL-2026-11757 blocks this version. npm/@ornikar/intl-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11764 blocks this version. npm/@ornikar/monorepo-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11761 blocks this version. npm/@ornikar/jest-config-react-native-web is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11774 blocks this version. npm/@ornikar/rollup-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11748 blocks this version. npm/@ornikar/eslint-config-formatjs is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (...
OpenSSF/OSV malware advisory MAL-2026-11756 blocks this version. npm/@ornikar/graphql-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sha...
OpenSSF/OSV malware advisory MAL-2026-11752 blocks this version. npm/@ornikar/eslint-config-typescript-nestjs is affected by the large-scale, self-propagating npm supply-chain worm of 202...
OpenSSF/OSV malware advisory MAL-2026-11777 blocks this version. npm/@ornikar/storybook-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11763 blocks this version. npm/@ornikar/lerna-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-...
OpenSSF/OSV malware advisory MAL-2026-11751 blocks this version. npm/@ornikar/eslint-config-typescript is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04...
OpenSSF/OSV malware advisory MAL-2026-11771 blocks this version. npm/@ornikar/repo-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11769 blocks this version. npm/@ornikar/react-native-svg-transformer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11772 blocks this version. npm/@ornikar/repo-config-react is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "...
OpenSSF/OSV malware advisory MAL-2026-11760 blocks this version. npm/@ornikar/jest-config-react-native is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04...
OpenSSF/OSV malware advisory MAL-2026-11754 blocks this version. npm/@ornikar/eslint-plugin-neverthrow is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04...
OpenSSF/OSV malware advisory MAL-2026-11780 blocks this version. npm/@ornikar/webpack-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sha...
OpenSSF/OSV malware advisory MAL-2026-11768 blocks this version. npm/@ornikar/react-modern-calendar-datepicker is affected by the large-scale, self-propagating npm supply-chain worm of 20...
OpenSSF/OSV malware advisory MAL-2026-11774 blocks this version. npm/@ornikar/rollup-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11766 blocks this version. npm/@ornikar/prettier-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11757 blocks this version. npm/@ornikar/intl-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11754 blocks this version. npm/@ornikar/eslint-plugin-neverthrow is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04...
OpenSSF/OSV malware advisory MAL-2026-11766 blocks this version. npm/@ornikar/prettier-config is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...