npm advisory reports, with evidence.
Investigate malicious npm packages reported through OSV and public advisories. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 572
Updated 26 Oct 2026, 13:49 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-6272 blocks this version. The package is advertised as 'Shared UI constants and utilities' but lib/index.js executes a malicious payload on require()...
OpenSSF/OSV malware advisory MAL-2026-4464 blocks this version. Package name @vtmn-play/react mimics Decathlon's Vitamin design system @vtmn/react and is published at version 99.9.1, the...
OpenSSF/OSV malware advisory MAL-2026-3577 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3576 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3574 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3575 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3570 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3569 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3568 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3573 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3572 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3571 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3565 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3564 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3563 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3561 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3562 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3560 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-3559 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...