npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 663
Updated 27 Oct 2026, 19:43 UTC. Ordered by latest scan.
Source inspection confirms an obfuscated, runtime-triggered collection-and-upload path for sensitive application data. The absence of install hooks does not mitigate this concrete exfiltr...
The preinstall hook contains a concrete, obfuscated remote fetch-and-eval chain. This is unconsented install-time remote code execution, not functionality required by a React UI package.
Direct source inspection confirms an install-time staged remote payload execution chain. The normal library entrypoints do not mitigate the malicious lifecycle behavior.
The concealed install-time fetch-and-eval chain is a concrete remote-code-execution mechanism, independent of the benign-looking library entrypoints. This warrants blocking publication.
The install-triggered native binary exposes concrete stealth, networking, process, and deletion capabilities inconsistent with the package’s stated functionality. This is sufficient evide...
Source inspection confirms an obfuscated, install-time remote payload execution chain. The normal library entrypoints do not mitigate the preinstall compromise.
Direct source inspection establishes automatic transmission of an IMAP configuration object that may contain the password to an unrelated hard-coded host. This is concrete credential exfi...
The package contains an import-time remote binary dropper targeting a foreign Windows Startup persistence surface. The benign calendar API does not justify this behavior.
Source inspection confirms concrete import-time remote payload delivery and Startup-folder persistence, inconsistent with the documented calendar utility. This is malicious behavior, not...
The package contains a concealed import-time remote payload delivery and persistence chain unrelated to calendar utilities. This is concrete malware behavior.
Source establishes a concrete runtime credential/configuration exfiltration path to an unrelated endpoint. No install hook is needed for this malicious behavior.
The package embeds a concealed remote-code loader with disabled TLS validation, despite presenting itself as a small SVG utility. No lifecycle hook is needed for the concrete user-trigger...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. On npm install, install.cjs runs a postinstall lifec...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. On npm install, install.cjs runs a postinstall lifec...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. On npm install, install.cjs runs a postinstall lifec...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. On npm install, install.cjs runs a postinstall lifecycle script that, on macOS, writes an AppleScript to /tmp and invokes...
OpenSSF/OSV malware advisory MAL-2026-10979 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. On npm install, install.cjs runs a postinstall lifec...