npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 676
Updated 28 Oct 2026, 03:32 UTC. Ordered by latest scan.
OpenSSF/OSV malware advisory MAL-2026-10752 blocks this version. The package's sole file i.js (declared as main) is a heavily obfuscated IIFE whose top-level exploit() runs unconditionall...
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
OpenSSF/OSV malware advisory MAL-2026-10696 blocks this version. The npm package's only file of substance is index.html (declared as `main` in package.json). When opened in a browser, the...
OpenSSF/OSV malware advisory MAL-2026-10694 blocks this version. Package advertises itself as 'A simple cryptographic library for JavaScript applications' but ships no crypto code and exp...
OpenSSF/OSV malware advisory MAL-2025-6694 blocks this version. The package communicates with a domain associated with malicious activity.
The package performs an unconsented install-time mutation of a consumer CI project and establishes persistent metadata exfiltration. The bundled frontend API traffic does not explain or m...
OpenSSF/OSV malware advisory MAL-2026-10711 blocks this version. The package ships heavily obfuscated runtime files (dist/index.js, dist/launcher.js) built with javascript-obfuscator. The...
OpenSSF/OSV malware advisory MAL-2026-10711 blocks this version. The package ships heavily obfuscated runtime files (dist/index.js, dist/launcher.js) built with javascript-obfuscator. The...
OpenSSF/OSV malware advisory MAL-2026-10718 blocks this version. scripts/postinstall.js fetches a ~10MB+ 'sciagent' executable over HTTPS from https://u250924-adc6-f977430f.westb.seetaclo...
OpenSSF/OSV malware advisory MAL-2026-10720 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The @vibelet/cli package ships a daemon bundle (dist...
OpenSSF/OSV malware advisory MAL-2026-10724 blocks this version. Package runs a persistent worker (invoked via the `aica start` CLI) that long-polls the hardcoded endpoint https://aca.kin...
OpenSSF/OSV malware advisory MAL-2026-10717 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The npm postinstall hook runs ensurePlatformBinary()...
OpenSSF/OSV malware advisory MAL-2026-10725 blocks this version. agentto@0.5.36 opens a WebSocket to the hardcoded server wss://link.agentto.net and routes `terminal.*` RPC frames receive...
OpenSSF/OSV malware advisory MAL-2026-10711 blocks this version. The package ships heavily obfuscated runtime files (dist/index.js, dist/launcher.js) built with javascript-obfuscator. The...
OpenSSF/OSV malware advisory MAL-2026-10711 blocks this version. The package ships heavily obfuscated runtime files (dist/index.js, dist/launcher.js) built with javascript-obfuscator. The...
OpenSSF/OSV malware advisory MAL-2026-10717 blocks this version. The npm postinstall hook runs ensurePlatformBinary(), which downloads a.tgz archive from the hardcoded bare-IP URL https:/...
OpenSSF/OSV malware advisory MAL-2026-10723 blocks this version. The package installs itself as a user-level service (systemd on Linux via service/linux.js, with launchd/PM2 siblings) and...
OpenSSF/OSV malware advisory MAL-2026-10717 blocks this version. The npm postinstall hook runs ensurePlatformBinary(), which downloads a.tgz archive from the hardcoded bare-IP URL https:/...
OpenSSF/OSV malware advisory MAL-2026-10705 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package's runtime connects to a hardcoded WebSoc...
OpenSSF/OSV malware advisory MAL-2026-10707 blocks this version. The `@ai-support-agent/cli` package installs a long-running daemon (`ai-support-agent start`) that connects to a vendor AP...
OpenSSF/OSV malware advisory MAL-2026-10706 blocks this version. The host daemon opens an outbound WebSocket connection to a hardcoded default proxy (https://proxy.agentvox.bot) and, on r...
OpenSSF/OSV malware advisory MAL-2026-10719 blocks this version. The CommonJS bundle loaded by `require('@thepayulink/server')` (dist/payulink-server.cjs) hardcodes `apiBase` to `https://...
OpenSSF/OSV malware advisory MAL-2026-10721 blocks this version. The package installs a `whalent` CLI daemon that opens a persistent WebSocket connection (`wss://`) to a Whalent Memory ga...