npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 673
Updated 28 Oct 2026, 01:55 UTC. Ordered by latest scan.
This is concrete, unconsented install-time credential exfiltration, not merely a user-invoked secrets utility. The configurable endpoint does not remove the risk because the package autom...
Source inspection confirms an import-time reverse shell to a hard-coded external endpoint. The benign node file and absence of lifecycle scripts do not mitigate the malicious package entr...
Direct source inspection confirms import-time reconnaissance, exfiltration, and a reverse shell; this is not explained by the declared n8n node functionality. No lifecycle hook is needed...
Direct source inspection confirms concrete import-time discovery, exfiltration, and remote shell behavior. No lifecycle hook is needed because the declared package entrypoint executes the...
Direct source inspection confirms import-time credential/infrastructure reconnaissance, exfiltration, and a hard-coded reverse shell. The advertised n8n node is inert and does not justify...
Source inspection confirms concrete import-time exfiltration and a reverse shell to a hard-coded external endpoint. The absence of install hooks does not mitigate the malicious main-entry...
OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...
OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...
The install hook performs the policy-defined blocking behavior: unconsented `postinstall` writes to global AI-agent control paths. Lack of network or credential theft does not remove that...
OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...
OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...
OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...
OpenSSF/OSV malware advisory MAL-2026-10424 blocks this version. terminal-mascot@3.5.2 ships a postinstall script (install-check.cjs) that resolves a bundle URL from a remote JSON config...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. px8my's `main` entry is a browser-side script that i...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...
OpenSSF/OSV malware advisory MAL-2026-10104 blocks this version. px8my's `main` entry is a browser-side script that injects a full-screen iframe pointing at a hardcoded remote URL (`https...