npm threat feed

npm security reports, with evidence.

Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.

Security reports — page 640

Updated 27 Oct 2026, 06:29 UTC. Ordered by latest scan.

@bobfrankston/rmfmail@1.2.185

Source establishes an automatic credential-bearing telemetry path to an unrelated host. The benign install hook and explicit MCP utility do not mitigate this runtime exfiltration.

Credential Exfiltration2026-07-30 10:58

@bobfrankston/rmfmail@1.2.186

Source directly establishes automatic third-party transmission of account configuration that can include passwords. The benign workspace-only postinstall does not mitigate the runtime exf...

Credential Exfiltration2026-07-30 10:58

streak-view-core@1.0.0

This is concrete concealed malware executed at import time, unrelated to calendar/streak functionality. Absence of npm lifecycle hooks does not mitigate the runtime dropper.

Malware2026-07-30 10:35

streak-int-lib@1.0.0

The automatic import-time binary drop-and-execute chain is concrete malware behavior unrelated to streak calculations. Absence of npm lifecycle hooks does not mitigate runtime compromise.

Malware2026-07-30 10:35

@finxsecdemo/utils@1.0.3

This is concrete, unconsented install-time metadata exfiltration, not merely a benign dependency-confusion notice. The package should be blocked.

Data Exfiltration2026-07-30 10:35

streak-daykey-lib@1.0.0

The package contains a concrete, automatic remote payload download and detached execution path on import. Its documented functionality provides no legitimate need for this behavior.

Remote Code Execution2026-07-30 10:35

@finxsecdemo/utils@1.0.2

The source establishes intentional install-time execution and an external callback, not merely a static hint. Although no payload download or file modification was found, this is concrete...

Dependency Confusion2026-07-30 10:35

streak-cal-core@1.0.0

This is concrete import-time malware execution, not calendar functionality or a scanner-only signal. The concealed native payload provides credential theft and exfiltration capabilities.

Credential Exfiltration2026-07-30 10:32

streak-core-bucket@1.0.0

The import-time payload downloader and detached executable launch are unrelated to calendar bucketing and require no user action beyond importing the package.

Remote Code Execution2026-07-30 10:32

streak-metric-core@1.0.0

The stated calendar/streak functionality does not require fetching and executing an opaque native binary. The behavior is concealed with character-code URL construction and runs automatic...

Remote Code Execution2026-07-30 10:32

streak-grid-core@1.0.0

Source inspection confirms a concrete, automatic native payload drop-and-execute chain in the default import path. The absence of an npm lifecycle hook does not mitigate import-time execu...

Malware2026-07-30 10:32

native-hello-plugin@1.1.0

The Windows native binary contains and invokes a concrete remote PowerShell execution chain during addon initialization. The benign package description and Linux SHA-256 implementation do...

Remote Code Execution2026-07-30 10:30

add-colors-to-website@1.0.3

Direct source inspection confirms immediate, concealed navigation behavior with a dynamically selected external host and no color-related implementation. This is concrete malicious runtim...

Malware2026-07-30 10:27

add-colors-to-website@1.0.2

The package has no legitimate color-related behavior; its sole runtime payload performs covert parent-frame navigation and disruption. This is concrete malicious browser behavior, not a s...

Malware2026-07-30 10:26

test2221@2.2.4

OpenSSF/OSV malware advisory MAL-2026-11192 blocks this version. package.json declares preinstall and postinstall lifecycle scripts that run curl against http://54.37.234.136/voicemail ov...

Malware2026-07-30 06:45

zer0code@0.2.0

OpenSSF/OSV malware advisory MAL-2026-11191 blocks this version. Package ships Python files under skills/pentesting.py and tools/security/exploit.py that reference ping commands and shell...

Malware2026-07-30 05:00

@zannstore/baileys@2.4.4