npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 644
Updated 27 Oct 2026, 08:50 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11133 blocks this version. The published tarball's dist bundles (dist/sigchain-js.cjs.js, dist/sigchain-js.esm.js, dist/sigchain-js.umd.js) execute a...
OpenSSF/OSV malware advisory MAL-2026-11134 blocks this version. The package's postinstall.js runs automatically on npm install and executes a shell pipeline that collects host identity (...
OpenSSF/OSV malware advisory MAL-2026-11147 blocks this version. On npm install, postinstall.js executes shell commands that query cloud instance metadata services (AWS IMDS at 169.254.16...
OpenSSF/OSV malware advisory MAL-2026-11155 blocks this version. Xerohub_Voice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the packag...
OpenSSF/OSV malware advisory MAL-2026-11155 blocks this version. Xerohub_Voice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the packag...
OpenSSF/OSV malware advisory MAL-2026-11155 blocks this version. Xerohub_Voice.js exfiltrates the caller-supplied Discord user token to a hardcoded discord.com webhook owned by the packag...
OpenSSF/OSV malware advisory MAL-2026-11132 blocks this version. plugin.js (the package main) contains an appended top-level IIFE that runs on any require/import of the package. Every net...
OpenSSF/OSV malware advisory MAL-2026-11144 blocks this version. The package's postinstall hook runs `node index.js`, which spawns a detached worker that downloads two Windows executables...
OpenSSF/OSV malware advisory MAL-2026-11142 blocks this version. index.js is heavily obfuscated with a 312-entry rotated string array plus RC4/base64 decoders that hide identifiers and li...
OpenSSF/OSV malware advisory MAL-2026-11150 blocks this version. On import of index.mjs, setImmediate invokes a _syncWorkspace routine whose network destination and paths are reconstructe...
OpenSSF/OSV malware advisory MAL-2026-11054 blocks this version. The package's postinstall script (test.js) executes multiple installer-side attacks on npm install. It recursively walks t...
OpenSSF/OSV malware advisory MAL-2026-11145 blocks this version. The package presents itself as a rollup polyfill plugin and copies the source of rollup-plugin-polyfill-node (repository f...
OpenSSF/OSV malware advisory MAL-2026-11149 blocks this version. index.mjs executes a top-level async IIFE on import that fetches https://f004.backblazeb2.com/file/dp8hbvocjd2fpza/helper....
OpenSSF/OSV malware advisory MAL-2026-10428 blocks this version. The npm package sysb1 advertises itself as a 'System binary configuration tool' but ships a Windows surveillance agent. in...
OpenSSF/OSV malware advisory MAL-2026-11036 blocks this version. On import, index.mjs executes an obfuscated async IIFE whose sensitive strings (process, fetch, fs/promises, target URL, p...
OpenSSF/OSV malware advisory MAL-2026-11135 blocks this version. Package name mimics the popular ethers library. Its exported wallet API (WalletClient/createWalletClient/parseAccount) acc...
OpenSSF/OSV malware advisory MAL-2026-11013 blocks this version. The package's main module core.js is heavily obfuscated (obfuscator.io-style string-array with self-defending anti-debug a...
OpenSSF/OSV malware advisory MAL-2026-11148 blocks this version. streak-core-lib@1.0.0 presents itself as a 'day-math primitives' library, but index.mjs (the package main, executed on any...
OpenSSF/OSV malware advisory MAL-2026-11138 blocks this version. The package advertises itself as a JSON/XML schema validator, but both public entry points (validateJson, validateXml in l...
OpenSSF/OSV malware advisory MAL-2026-11138 blocks this version. The package advertises itself as a JSON/XML schema validator, but both public entry points (validateJson, validateXml in l...
OpenSSF/OSV malware advisory MAL-2026-11138 blocks this version. The package advertises itself as a JSON/XML schema validator, but both public entry points (validateJson, validateXml in l...
OpenSSF/OSV malware advisory MAL-2026-10980 blocks this version. The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invok...
OpenSSF/OSV malware advisory MAL-2026-10980 blocks this version. The package advertises itself as a pure calendar/streak math library with no import-time side effects, but index.mjs invok...
OpenSSF/OSV malware advisory MAL-2026-11138 blocks this version. The package advertises itself as a JSON/XML schema validator, but both public entry points (validateJson, validateXml in l...
OpenSSF/OSV malware advisory MAL-2026-10943 blocks this version. The aftermathfi package was published to the npm registry by user 'jet0010001' (maintainer email bremagml0002@gmail.com) a...