npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 659
Updated 27 Oct 2026, 17:12 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-10899 blocks this version. Package name 'solana-web3-fixed' resembles a fix-branded variant of the legitimate '@solana/web3.js' library, a pattern fr...
OpenSSF/OSV malware advisory MAL-2026-10901 blocks this version. Package name 'solana-web3-lts' resembles the widely-used '@solana/web3.js' Solana SDK, raising name-confusion concerns for...
OpenSSF/OSV malware advisory MAL-2026-10902 blocks this version. Package name 'solana-web3-patched' resembles the legitimate '@solana/web3.js' library and is published as an unscoped look...
OpenSSF/OSV malware advisory MAL-2026-10900 blocks this version. Package name appears to fork or imitate the well-known @solana/web3.js library. Bundled files lib/index.cjs.js and lib/ind...
OpenSSF/OSV malware advisory MAL-2026-10903 blocks this version. Package name 'solana-web3-stable' closely resembles the widely-used @solana/web3.js library, raising typosquat concern. Th...
OpenSSF/OSV malware advisory MAL-2026-5560 blocks this version. Package masquerades as the official @solana/web3.js SDK (name solana-web3-community, author 'Solana Labs Maintainers <maint...
OpenSSF/OSV malware advisory MAL-2026-5560 blocks this version. Package masquerades as the official @solana/web3.js SDK (name solana-web3-community, author 'Solana Labs Maintainers <maint...
OpenSSF/OSV malware advisory MAL-2026-5560 blocks this version. Package masquerades as the official @solana/web3.js SDK (name solana-web3-community, author 'Solana Labs Maintainers <maint...
OpenSSF/OSV malware advisory MAL-2026-5560 blocks this version. Package masquerades as the official @solana/web3.js SDK (name solana-web3-community, author 'Solana Labs Maintainers <maint...
OpenSSF/OSV malware advisory MAL-2026-5560 blocks this version. Package masquerades as the official @solana/web3.js SDK (name solana-web3-community, author 'Solana Labs Maintainers <maint...
OpenSSF/OSV malware advisory MAL-2026-5559 blocks this version. On `npm install`, the package's postinstall hook (`node install.js`) executes a multi-stage attack against the installer's...
OpenSSF/OSV malware advisory MAL-2026-5573 blocks this version. On `npm install`, the package's postinstall hook runs install.js which performs four independent attacker-benefit actions....
OpenSSF/OSV malware advisory MAL-2026-5988 blocks this version. The package presents itself as 'Simplified HTTP request client' and copies identity metadata from Mikeal Rogers' legitimate...
OpenSSF/OSV malware advisory MAL-2026-6135 blocks this version. Package is not a library. `main` points at `sw.js`, a browser Service Worker that uses `importScripts`, `self.addEventListe...
OpenSSF/OSV malware advisory MAL-2026-10387 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-10396 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code
OpenSSF/OSV malware advisory MAL-2026-10906 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10113 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2026-10112 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys store...
OpenSSF/OSV malware advisory MAL-2026-2929 blocks this version. On require(), path.js runs an IIFE that calls a loader which fetches a base64-hidden URL (https://www.jsonkeeper.com/b/XTTB...
OpenSSF/OSV malware advisory MAL-2026-5670 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-5850 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-5850 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-5850 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...
OpenSSF/OSV malware advisory MAL-2026-5850 blocks this version. Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored...