npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 668
Updated 27 Oct 2026, 22:59 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-10878 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10877 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10876 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10875 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10881 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10871 blocks this version.
OpenSSF/OSV malware advisory MAL-2026-10870 blocks this version.
The concrete postinstall behavior satisfies the block policy regardless of scanner similarity labels. The lifecycle script writes outside the package and forcibly replaces foreign agent-c...
This is concrete hidden persistence behavior unrelated to the stated utility package and activates merely on import. Absence of an npm lifecycle hook does not mitigate the import-time dro...
The package implements a concrete automatic collection-and-exfiltration chain for administrator PII and deployment metadata unrelated to a user-invoked monitoring action. The lack of inst...
This is concrete stealthy persistence via an import-time payload drop, unrelated to the documented placeholder utilities. The absence of an install hook does not mitigate the malicious ru...
Source inspection confirms the lifecycle-driven global OpenCode configuration mutation; the scanner finding is substantiated. Although no exfiltration or remote code loading was found, th...
The lifecycle hook modifies global ~/.claude and ~/.codex control directories without a user command, meeting the blocking policy. The absence of a direct network call in the hook does no...
The package contains no observed exfiltration or remote code-loading chain, but its automatic postinstall installs and activates persistent global OpenCode control files. This meets the b...
The package description promises simple utilities, but its sole implementation is a concealed native payload dropper with Startup-folder persistence. The absence of lifecycle hooks does n...
The package has no observed exfiltration or remote payload chain, but its automatic postinstall globally installs and enables agent extensions. That meets the firewall block boundary for...
The source establishes an unconsented postinstall mutation of a foreign, broad AI-agent control surface. No additional exfiltration or remote execution is needed for this policy-defined m...
The postinstall behavior is concrete, unconsented, and targets multiple external AI-agent control surfaces. No network exfiltration or secondary payload was found, but the lifecycle mutat...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...
OpenSSF/OSV malware advisory MAL-2026-10138 blocks this version. uac-package@1.4.4 is an analytics package that, on install, silently mutates the installer's project files: postinstall.js...