npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 552
Updated 25 Oct 2026, 23:46 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-5189 blocks this version. This package was compromised as part of the IronWorm campaign. This campaign executes a malicious binary payload during ins...
OpenSSF/OSV malware advisory MAL-2026-5506 blocks this version. OSV/OpenSSF confirms argoncrypt@1.2.3 as malicious package MAL-2026-5506. Malicious code in argoncrypt (npm)
OpenSSF/OSV malware advisory MAL-2026-3215 blocks this version. The package archetype-style was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-4494 blocks this version. The package name is a single-character transposition of `axios`. `package.json` declares `preinstall`, `install`, and `post...
OpenSSF/OSV malware advisory MAL-2026-5742 blocks this version. axl-ui@9.9.99 is a dependency-confusion squat targeting an internal package name. package.json declares a postinstall hook...
OpenSSF/OSV malware advisory MAL-2026-3078 blocks this version. The package axis-notification was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3078 blocks this version. The package axis-notification was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3078 blocks this version. The package axis-notification was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3076 blocks this version. The package axis-abc-search-address was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3076 blocks this version. The package axis-abc-search-address was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3076 blocks this version. The package axis-abc-search-address was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3075 blocks this version. The package axis-abc-search-account was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3075 blocks this version. The package axis-abc-search-account was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3075 blocks this version. The package axis-abc-search-account was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-4493 blocks this version. Package name `axiosqqq` is a 3-character-suffix typosquat of `axios` and ships axios's verbatim source, README, and CHANGEL...
OpenSSF/OSV malware advisory MAL-2026-3187 blocks this version. The package apple-appstore-full-library-utility was found to contain malicious code.
OpenSSF/OSV malware advisory MAL-2026-3151 blocks this version. Malicious npm package published by threat actor "raya4321" as part of a coordinated typosquatting campaign impersonating Ap...