npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 667
Updated 27 Oct 2026, 22:21 UTC. Ordered by latest scan.
The postinstall hook establishes persistent, package-authored commands in a user-wide agent configuration location. This meets the blocking policy for unconsented install-time AI-agent co...
This is a concrete, unconsented install-time mutation of a foreign AI-agent control surface, even though the behavior is documented and conditional. No network exfiltration or concealed p...
This is concrete unconsented postinstall mutation of foreign, broad AI-agent control surfaces, meeting the blocking policy. Collision checks reduce overwrite risk but do not remove the in...
Source inspection confirms a concrete postinstall persistence chain across multiple AI-agent hosts. The global-install default makes it unconsented rather than an explicit user-command se...
The lifecycle hook is unconditional and modifies global agent-discovered instructions outside the package, with forced overwrite. This meets the install-time AI-agent control-hijack block...
This is an unconsented postinstall mutation of foreign AI-agent control surfaces, not merely an explicit scaffold command. No separate credential theft or external data-exfiltration path...
This is concrete, unconsented postinstall mutation of a broad user-level AI-agent control surface; the forced overwrite makes it a block-level lifecycle hijack under policy.
The concrete postinstall chain performs unconsented configuration of a foreign/broad AI-agent control surface. The opt-out does not make the default install behavior consented.
The package performs the exact prohibited postinstall mutation of a foreign/user-level AI-agent control surface. The absence of observed exfiltration does not mitigate the control-hijack...
This is concrete, unconsented persistence through import-time dropping of an embedded executable, unrelated to the stated package purpose.
OpenSSF/OSV malware advisory MAL-2026-10887 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10888 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10886 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10885 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10884 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10882 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10883 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10889 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10880 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10874 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10872 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10873 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10879 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10878 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10877 blocks this version.