npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 645
Updated 27 Oct 2026, 09:27 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-10943 blocks this version. The aftermathfi package was published to the npm registry by user 'jet0010001' (maintainer email bremagml0002@gmail.com) a...
OpenSSF/OSV malware advisory MAL-2026-10942 blocks this version. The aftermath-sui package was published to the npm registry by user 'jet0010001' (maintainer email bremagml0002@gmail.com)...
OpenSSF/OSV malware advisory MAL-2026-10428 blocks this version. The npm package sysb1 advertises itself as a 'System binary configuration tool' but ships a Windows surveillance agent. in...
OpenSSF/OSV malware advisory MAL-2026-11143 blocks this version. The npm package name `parallely` typosquats `concurrently`: package.json advertises the concurrently repository, author, a...
OpenSSF/OSV malware advisory MAL-2026-10769 blocks this version. On npm install, the package's postinstall hook executes index.js, which POSTs the installer's full process.env, OS usernam...
OpenSSF/OSV malware advisory MAL-2026-10769 blocks this version. On npm install, the package's postinstall hook executes index.js, which POSTs the installer's full process.env, OS usernam...
OpenSSF/OSV malware advisory MAL-2026-10769 blocks this version. On npm install, the package's postinstall hook executes index.js, which POSTs the installer's full process.env, OS usernam...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10769 blocks this version. On npm install, the package's postinstall hook executes index.js, which POSTs the installer's full process.env, OS usernam...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10775 blocks this version. Package masquerades as an n8n community node (package.json declares n8n.nodes: ["MyNode.js"], a trivial placeholder) while...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...
OpenSSF/OSV malware advisory MAL-2026-10999 blocks this version. The package impersonates the n8n task-runner subsystem but its shipped n8n node (MyNode.js) is a no-op stub whose execute(...