npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 562
Updated 25 Oct 2026, 03:07 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11848 blocks this version. npm/@servicetitan/culture is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-...
OpenSSF/OSV malware advisory MAL-2026-11855 blocks this version. npm/@servicetitan/document-title is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11851 blocks this version. npm/@servicetitan/datetime-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11869 blocks this version. npm/@servicetitan/forge is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hu...
OpenSSF/OSV malware advisory MAL-2026-11847 blocks this version. npm/@servicetitan/cp-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hu...
OpenSSF/OSV malware advisory MAL-2026-11866 blocks this version. npm/@servicetitan/examples is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11873 blocks this version. npm/@servicetitan/hammer-icon is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11857 blocks this version. npm/@servicetitan/dte-unlayer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11854 blocks this version. npm/@servicetitan/docs-uikit is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11849 blocks this version. npm/@servicetitan/data-query is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11856 blocks this version. npm/@servicetitan/dte-pdf-editor is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11850 blocks this version. npm/@servicetitan/datadog-rum is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11844 blocks this version. npm/@servicetitan/cp-mfe is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11843 blocks this version. npm/@servicetitan/cp-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11845 blocks this version. npm/@servicetitan/cp-mfe-dev is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11868 blocks this version. npm/@servicetitan/folder-lint is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11855 blocks this version. npm/@servicetitan/document-title is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11867 blocks this version. npm/@servicetitan/feature-spotlight is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (...
OpenSSF/OSV malware advisory MAL-2026-11848 blocks this version. npm/@servicetitan/culture is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-...
OpenSSF/OSV malware advisory MAL-2026-11863 blocks this version. npm/@servicetitan/eslint-plugin-folder-schema is affected by the large-scale, self-propagating npm supply-chain worm of 20...
OpenSSF/OSV malware advisory MAL-2026-11858 blocks this version. npm/@servicetitan/eh-module-communication is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11851 blocks this version. npm/@servicetitan/datetime-utils is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11853 blocks this version. npm/@servicetitan/docs-anvil-uikit-contrib is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11866 blocks this version. npm/@servicetitan/examples is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai...
OpenSSF/OSV malware advisory MAL-2026-11843 blocks this version. npm/@servicetitan/cp-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...