npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 631
Updated 27 Oct 2026, 00:53 UTC. Ordered by latest scan.
The import-time loader has no package-aligned function and directly stages and executes attacker-controlled remote bytes. The benign-looking API and telemetry module do not mitigate that...
Source inspection confirms an import-time staged-payload downloader and executor, not merely telemetry. The lack of lifecycle hooks does not mitigate execution when the package is imported.
This is a concrete import-time remote payload execution chain unrelated to the advertised icons package. No lifecycle script is needed because the malicious loader runs from the main entr...
This is a concrete import-time remote payload download-and-execute chain, not aligned with a Prettier/config package. The unused telemetry file contains similar staged native-execution ma...
The source implements concrete, undisclosed remote binary retrieval and execution on import. The absence of lifecycle hooks does not mitigate this reachable runtime execution chain.
Direct source inspection confirms a reachable staged-payload loader and detached remote binary execution; the lack of npm lifecycle hooks does not mitigate import-time activation.
This is a concrete import-time remote-code-execution payload loader, not telemetry behavior. The lack of npm lifecycle hooks does not reduce the runtime compromise risk.
This is a concrete, automatic remote payload execution chain unrelated to the documented metrics API. Absence of an install hook does not mitigate import-time execution.
Direct source inspection confirms an import-time staged payload downloader and executor. The lack of an install hook does not mitigate execution when the package is imported.
This is concrete import-time staged remote code execution unrelated to the exported metrics collector. The absence of lifecycle scripts does not mitigate execution on normal package import.
The malicious chain is reachable through the declared main entrypoint and needs no install hook or explicit package API call. The telemetry file reinforces the same staged-payload behavio...
OpenSSF/OSV malware advisory MAL-2026-11212 blocks this version. @goodjavascript/dotenv@1.0.0 (published 2025-03-22T09:05:32Z, replaced by an npm 0.0.1-security holding stub 2026-07-30T22...
OpenSSF/OSV malware advisory MAL-2026-11484 blocks this version. Package advertises itself as a date formatting utility but ships an active install-time exfiltration payload. package.json...
OpenSSF/OSV malware advisory MAL-2026-11498 blocks this version. package.json declares a postinstall hook (`node index.js`) that runs automatically on `npm install`. index.js opens a TCP...
OpenSSF/OSV malware advisory MAL-2026-11460 blocks this version. lib/report.js imports child_process, fs, https, and os and collects host identity and environment data via os.hostname(),...
OpenSSF/OSV malware advisory MAL-2026-11474 blocks this version. Package name closely resembles the widely used @inlang/paraglide-js i18n library, but the declared main entry (index.js) i...
OpenSSF/OSV malware advisory MAL-2026-11486 blocks this version. The package ships lib/report.js which collects the installer's developer identity — email (obtained via `gh api user/email...
OpenSSF/OSV malware advisory MAL-2026-11482 blocks this version. lib/report.js collects the installer's developer identity — os.userInfo().username, os.hostname(), and the git/GitHub emai...
OpenSSF/OSV malware advisory MAL-2026-11481 blocks this version. The package (name suggests an SAP MCP configuration helper) ships lib/report.js which, from a postinstall hook, collects d...
OpenSSF/OSV malware advisory MAL-2026-11480 blocks this version. The package published as 'routerbase-mcp' declares a bin named 'install-email-research' and ships lib/report.js which coll...
OpenSSF/OSV malware advisory MAL-2026-11477 blocks this version. Package published as 'refbase-mcp' self-describes as 'install-email-research'. The postinstall hook loads lib/report.js wh...
OpenSSF/OSV malware advisory MAL-2026-11476 blocks this version. lib/report.js resolves the installer's git/GitHub email through `gh api user/emails`, `git config`, `npm config`, and envi...
OpenSSF/OSV malware advisory MAL-2026-11475 blocks this version. lib/report.js imports child_process, fs, os, and https, then collects host and user identity data via os.hostname() and os...
OpenSSF/OSV malware advisory MAL-2026-11472 blocks this version. Package name 'mcp-server-boilerplate' is unrelated to the Model Context Protocol ecosystem it evokes; the shipped code is...
OpenSSF/OSV malware advisory MAL-2026-11471 blocks this version. lib/report.js gathers the developer's email (queried via `gh api user/emails`, `git config user.email`, `~/.gitconfig`, `n...