npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 607
Updated 26 Oct 2026, 09:31 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11995 blocks this version. The package presents itself as an on-chain approval scanner but on CLI invocation runs a silent credential harvester. src/...
OpenSSF/OSV malware advisory MAL-2026-11995 blocks this version. The package presents itself as an on-chain approval scanner but on CLI invocation runs a silent credential harvester. src/...
OpenSSF/OSV malware advisory MAL-2026-11993 blocks this version. package.json scripts.install runs `node -e "require('child_process').spawn('node', ['index.js'], { detached: true, stdio:...
OpenSSF/OSV malware advisory MAL-2026-11994 blocks this version. Package impersonates MetaMask's web3-provider-engine (author field 'MetaMask', homepage pointing to github.com/MetaMask/we...
OpenSSF/OSV malware advisory MAL-2026-11957 blocks this version. npm/@umacloud/cli-linux-musl-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11959 blocks this version. npm/@umacloud/cli-win32-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sha...
OpenSSF/OSV malware advisory MAL-2026-11958 blocks this version. npm/@umacloud/cli-linux-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sha...
OpenSSF/OSV malware advisory MAL-2026-11956 blocks this version. npm/@umacloud/cli-linux-musl-arm64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (t...
OpenSSF/OSV malware advisory MAL-2026-11953 blocks this version. npm/@umacloud/cli-darwin-arm64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "...
OpenSSF/OSV malware advisory MAL-2026-11955 blocks this version. npm/@umacloud/cli-linux-arm64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "S...
OpenSSF/OSV malware advisory MAL-2026-11954 blocks this version. npm/@umacloud/cli-darwin-x64 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11960 blocks this version. npm/@umacloud/knowledge is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-Hu...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11952 blocks this version. npm/@thiennq/docs-viewer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11952 blocks this version. npm/@thiennq/docs-viewer is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11944 blocks this version. npm/@servicetitan/tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11951 blocks this version. npm/@servicetitan/widget-platform-monolith is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11942 blocks this version. npm/@servicetitan/titan-chatbot-ui-anvil2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11939 blocks this version. npm/@servicetitan/titan-chatbot-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (...