npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 656
Updated 27 Oct 2026, 15:24 UTC. Ordered by latest scan.
This is a concrete remote code-execution loader, not package-aligned icon functionality. Absence of an install hook does not mitigate the runtime execution path.
The public calendar helpers conceal an import-triggered downloader and Windows persistence routine unrelated to package functionality. This is malicious behavior despite a likely implemen...
The hidden import-time download, executable extraction, and Startup-folder persistence are concrete malware behavior unrelated to streak math. No lifecycle hook is needed because the payl...
The package is a concealed remote data-collection and input-automation tool unrelated to its stated system-binary configuration purpose. Although no install hook runs it automatically, ex...
The package establishes stealthy remote payload delivery and login persistence during ordinary import. Absence of an npm lifecycle hook does not mitigate this concrete runtime attack path.
This is a concrete remote payload and persistence mechanism unrelated to calendar/streak functionality. Absence of an npm lifecycle hook does not mitigate import-time execution.
Source shows a concrete runtime exfiltration path for sensitive account configuration to a non-service logging endpoint. This exceeds ordinary package telemetry and is not install-time de...
The third-party logging endpoint receives sensitive account configuration without a user-facing consent boundary. No install hook is needed for this runtime exfiltration to be malicious.
OpenSSF/OSV malware advisory MAL-2026-11001 blocks this version. The npm package `date-format-utils-xz` masquerades as a date-formatting utility but is malicious. Its own decoy `index.js`...
OpenSSF/OSV malware advisory MAL-2026-11001 blocks this version. The npm package `date-format-utils-xz` masquerades as a date-formatting utility but is malicious. Its own decoy `index.js`...
OpenSSF/OSV malware advisory MAL-2026-11001 blocks this version. The npm package `date-format-utils-xz` masquerades as a date-formatting utility but is malicious. Its own decoy `index.js`...
OpenSSF/OSV malware advisory MAL-2026-11001 blocks this version. The npm package `date-format-utils-xz` masquerades as a date-formatting utility but is malicious. Its own decoy `index.js`...
OpenSSF/OSV malware advisory MAL-2026-11001 blocks this version. The npm package `date-format-utils-xz` masquerades as a date-formatting utility but is malicious. Its own decoy `index.js`...
OpenSSF/OSV malware advisory MAL-2026-11043 blocks this version. The npm package `supplyhub` is a credential / SSH-key stealer. Its `package.json` declares a `postinstall` lifecycle hook...
OpenSSF/OSV malware advisory MAL-2026-11042 blocks this version. The npm package `faust-cont` is a supply-chain dropper disguised as a benign CLI tool (`index.js` is a decoy that only log...
OpenSSF/OSV malware advisory MAL-2026-11041 blocks this version. The package declares a postinstall script (postinstall.js) that runs automatically on npm/pnpm install and POSTs host iden...
OpenSSF/OSV malware advisory MAL-2026-11041 blocks this version. The package declares a postinstall script (postinstall.js) that runs automatically on npm/pnpm install and POSTs host iden...
OpenSSF/OSV malware advisory MAL-2026-11041 blocks this version. The package declares a postinstall script (postinstall.js) that runs automatically on npm/pnpm install and POSTs host iden...
OpenSSF/OSV malware advisory MAL-2026-11040 blocks this version. package.json declares `preinstall: node./dist/index.d.js`, which fires automatically on `npm install`. The script contains...
OpenSSF/OSV malware advisory MAL-2026-6715 blocks this version. src/index.cjs exports getPlugin(), which returns a function that performs an HTTPS GET to a hardcoded URL 'https://api.avax...
Source inspection confirms a concealed remote-code-execution path in src/index.cjs. It is not install-time, but it is concrete malicious functionality rather than a package-aligned feature.
The native addon’s imported APIs and embedded anti-analysis/staging indicators are materially inconsistent with a buffer utility. The absence of install hooks does not mitigate import-tim...
Direct inspection confirms default runtime cookie exfiltration unrelated to icon rendering. No install hook is needed for this concrete malicious behavior.
Direct source inspection confirms runtime cookie exfiltration to external endpoints; no install hook is required for the malicious behavior.
Concrete source shows automatic, suppressed transmission of mail/account-related logs to an unrelated remote endpoint. The benign workspace-only postinstall hook does not mitigate this ru...