npm security reports, with evidence.

OpenSSF Malicious Packages via OSV confirms figlet-chalk-render@1.2.1 as malicious (MAL-2026-17226): Malicious code in figlet-chalk-render (npm)

OpenSSF Malicious Packages via OSV confirms chalk-figlet@1.2.0 as malicious (MAL-2026-17223): Malicious code in chalk-figlet (npm)

OpenSSF Malicious Packages via OSV confirms nebula-llm@1.0.0 as malicious (MAL-2026-17227): Malicious code in nebula-llm (npm)

OpenSSF Malicious Packages via OSV confirms nebulaai-sdk@1.0.0 as malicious (MAL-2026-17228): Malicious code in nebulaai-sdk (npm)

OpenSSF Malicious Packages via OSV confirms simple-date-formatter-new-12@1.0.0 as malicious (MAL-2026-17229): Malicious code in simple-date-formatter-new-12 (npm)

OpenSSF Malicious Packages via OSV confirms vite-plugin-crypto@1.0.2 as malicious (MAL-2026-17222): Malicious code in vite-plugin-crypto (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.1.6 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.1.5 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.1.4 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.1.3 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.1.2 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.1.1 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.0.2 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

OpenSSF Malicious Packages via OSV confirms my-skibidi@1.0.0 as malicious (MAL-2026-17217): Malicious code in my-skibidi (npm)

The undocumented, import-time hidden launch and directory watch establish a concrete covert execution chain. The lack of a network sink does not remove the local execution and staging risk.

The package contains concrete covert payload extraction and user-directory executable placement activated on import. The delayed watcher and carrier deletion reinforce malicious intent de...

The automatic global-install path changes broad AI-agent configuration and adds login persistence. Its self-updating launcher compounds the unconsented lifecycle chain.

The postinstall hook performs unconsented, broad mutation of a foreign AI-agent control surface. This meets the blocking policy for lifecycle control-surface abuse.

The lifecycle hook creates a complete automatic chain from npm installation to writes in multiple AI-agent skill directories. This meets the policy for a blocking install-hook control-sur...

The package contains an automatic install hook connected to active credential harvesting and outbound transmission. This is concrete malicious data exfiltration.