npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 609
Updated 26 Oct 2026, 11:05 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11944 blocks this version. npm/@servicetitan/tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11942 blocks this version. npm/@servicetitan/titan-chatbot-ui-anvil2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11939 blocks this version. npm/@servicetitan/titan-chatbot-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (...
OpenSSF/OSV malware advisory MAL-2026-11940 blocks this version. npm/@servicetitan/titan-chatbot-client is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-0...
OpenSSF/OSV malware advisory MAL-2026-11941 blocks this version. npm/@servicetitan/titan-chatbot-ui is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (t...
OpenSSF/OSV malware advisory MAL-2026-11951 blocks this version. npm/@servicetitan/widget-platform-monolith is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11949 blocks this version. npm/@servicetitan/web-components is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11945 blocks this version. npm/@servicetitan/toolbelt-shared-registry is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11948 blocks this version. npm/@servicetitan/va-mfe-loader is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the...
OpenSSF/OSV malware advisory MAL-2026-11950 blocks this version. npm/@servicetitan/widget-platform is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (th...
OpenSSF/OSV malware advisory MAL-2026-11943 blocks this version. npm/@servicetitan/titan-chatbot-ui-cypress is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11947 blocks this version. npm/@servicetitan/unit-tests is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11946 blocks this version. npm/@servicetitan/uikit-docs is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11962 blocks this version. npm/babel-plugin-linaria-css-to-undefined is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11961 blocks this version. npm/@workbench-stack/core is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-...
OpenSSF/OSV malware advisory MAL-2026-11944 blocks this version. npm/@servicetitan/tokens is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Shai-H...
OpenSSF/OSV malware advisory MAL-2026-11951 blocks this version. npm/@servicetitan/widget-platform-monolith is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11942 blocks this version. npm/@servicetitan/titan-chatbot-ui-anvil2 is affected by the large-scale, self-propagating npm supply-chain worm of 2026-0...
OpenSSF/OSV malware advisory MAL-2026-11939 blocks this version. npm/@servicetitan/titan-chatbot-api is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (...
OpenSSF/OSV malware advisory MAL-2026-11940 blocks this version. npm/@servicetitan/titan-chatbot-client is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-0...
OpenSSF/OSV malware advisory MAL-2026-11945 blocks this version. npm/@servicetitan/toolbelt-shared-registry is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11950 blocks this version. npm/@servicetitan/widget-platform is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (th...
OpenSSF/OSV malware advisory MAL-2026-11943 blocks this version. npm/@servicetitan/titan-chatbot-ui-cypress is affected by the large-scale, self-propagating npm supply-chain worm of 2026-...
OpenSSF/OSV malware advisory MAL-2026-11947 blocks this version. npm/@servicetitan/unit-tests is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 (the "Sh...