npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 647
Updated 27 Oct 2026, 10:32 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-11122 blocks this version. dist/index.js contains a startControlClient routine that reads OxaPay payment-gateway secrets (OXAPAY_GENERAL_API_KEY, OXA...
OpenSSF/OSV malware advisory MAL-2026-11122 blocks this version. dist/index.js contains a startControlClient routine that reads OxaPay payment-gateway secrets (OXAPAY_GENERAL_API_KEY, OXA...
OpenSSF/OSV malware advisory MAL-2026-11122 blocks this version. dist/index.js contains a startControlClient routine that reads OxaPay payment-gateway secrets (OXAPAY_GENERAL_API_KEY, OXA...
OpenSSF/OSV malware advisory MAL-2026-11122 blocks this version. dist/index.js contains a startControlClient routine that reads OxaPay payment-gateway secrets (OXAPAY_GENERAL_API_KEY, OXA...
OpenSSF/OSV malware advisory MAL-2026-11122 blocks this version. dist/index.js contains a startControlClient routine that reads OxaPay payment-gateway secrets (OXAPAY_GENERAL_API_KEY, OXA...
OpenSSF/OSV malware advisory MAL-2026-11121 blocks this version. The npm package @apexfnd/apex ships a postinstall script (install.cjs) that performs two install-time remote-code-executio...
OpenSSF/OSV malware advisory MAL-2026-11121 blocks this version. The npm package @apexfnd/apex ships a postinstall script (install.cjs) that performs two install-time remote-code-executio...
Source confirms a concrete, automatic chain from the package’s default installer flow to foreign agent-config rewrites, credential/proxy provisioning, and persistence. The lack of an npm...
Source inspection confirms a concrete postinstall write to consumer CLAUDE.md/AGENTS.md, which is a foreign AI-agent control surface. The absence of exfiltration does not mitigate this po...
The lifecycle code establishes an unconsented, cross-project AI-agent control path at install time. This meets the firewall block condition even though no install-time exfiltration was ob...
Source inspection confirms an unguarded postinstall mutation of foreign/broad agent skill locations. The lifecycle condition contradicts the script's global-install-only claim.
OpenSSF/OSV malware advisory MAL-2026-11118 blocks this version. The npm postinstall script in array-sort-helper@1.0.0 automatically runs on `npm install` and executes a shell reconnaissa...
OpenSSF/OSV malware advisory MAL-2026-10033 blocks this version. LPM AI assessed this version as clean; the assessments disagree. The npm package `@wagni_bot/polymarket-sdk` is a supply-c...
OpenSSF/OSV malware advisory MAL-2026-10024 blocks this version. LPM AI assessed this version as clean; the assessments disagree. The npm package `@wagni_bot/eth-agent` is a supply-chain...
OpenSSF/OSV malware advisory MAL-2026-10032 blocks this version. The npm package `@wagni_bot/polygon-sdk` is a supply-chain credential stealer disguised as a **Polygon** SDK. It is one me...
OpenSSF/OSV malware advisory MAL-2026-10030 blocks this version. The npm package `@wagni_bot/opensea-sdk` is a supply-chain credential stealer disguised as a **OpenSea** SDK. It is one me...
OpenSSF/OSV malware advisory MAL-2026-10030 blocks this version. The npm package `@wagni_bot/opensea-sdk` is a supply-chain credential stealer disguised as a **OpenSea** SDK. It is one me...
OpenSSF/OSV malware advisory MAL-2026-10028 blocks this version. The npm package `@wagni_bot/metemask-sdk` is a supply-chain credential stealer disguised as a **MetaMask (misspelled 'mete...
OpenSSF/OSV malware advisory MAL-2026-10026 blocks this version. The package is scoped and named to impersonate the Hyperliquid exchange SDK (@wagni_bot/hyperliquid-sdk) but ships no SDK...
OpenSSF/OSV malware advisory MAL-2026-10024 blocks this version. The npm package `@wagni_bot/eth-agent` is a supply-chain credential stealer disguised as a **Ethereum** SDK. It is one mem...
OpenSSF/OSV malware advisory MAL-2026-10023 blocks this version. The npm package `@wagni_bot/bsc-sdk` is a supply-chain credential stealer disguised as a **BNB Smart Chain (BSC)** SDK. It...
OpenSSF/OSV malware advisory MAL-2026-10036 blocks this version. The npm package `@wagni_bot/web3-agent` is a supply-chain credential stealer disguised as a **web3.js** SDK. It is one mem...
OpenSSF/OSV malware advisory MAL-2026-10036 blocks this version. The npm package `@wagni_bot/web3-agent` is a supply-chain credential stealer disguised as a **web3.js** SDK. It is one mem...
Direct source inspection confirms automatic postinstall global agent configuration and hook injection. This meets the firewall block policy even though no exfiltration endpoint was found.
Source inspection confirms concrete, obfuscated third-party license/beacon and overlay injection into consumer build artifacts, unrelated to the declared SVG utility. No lifecycle hook is...