npm advisory reports, with evidence.

OpenSSF Malicious Packages via OSV confirms css-at-scope-polyfill@1.0.0 as malicious (MAL-2026-17547): Malicious code in css-at-scope-polyfill (npm)

OpenSSF Malicious Packages via OSV confirms aria-live-region-helper@1.0.0 as malicious (MAL-2026-17546): Malicious code in aria-live-region-helper (npm)

OpenSSF Malicious Packages via OSV confirms unified-platform@99.9.1 as malicious (MAL-2026-17566): Malicious code in unified-platform (npm)

OpenSSF Malicious Packages via OSV confirms risk-detection@99.9.1 as malicious (MAL-2026-17563): Malicious code in risk-detection (npm)

OpenSSF Malicious Packages via OSV confirms typesens@1.0.0 as malicious (MAL-2026-17565): Malicious code in typesens (npm)

OpenSSF Malicious Packages via OSV confirms ph-common@77.7.7 as malicious (MAL-2026-1809): Malicious code in ph-common (npm)

OpenSSF Malicious Packages via OSV confirms translate-base-font@1.4.2 as malicious (MAL-2026-17458): Malicious code in translate-base-font (npm)

OpenSSF Malicious Packages via OSV confirms xeprews@5.2.2 as malicious (MAL-2026-17248): Malicious code in xeprews (npm)

OpenSSF Malicious Packages via OSV confirms apl-rive-renderer@100.0.0 as malicious (MAL-2026-17431): Malicious code in apl-rive-renderer (npm)

Inspected source establishes automatic collection and external transmission of local metadata during installation and import. This concrete data exfiltration supports blocking despite the...

Inspected source establishes automatic collection and external transmission of local host and project metadata during installation and import. This concrete exfiltration behavior supports...

Inspected source establishes automatic collection and external transmission of local metadata during installation and import. This concrete data exfiltration supports blocking independent...

Source confirms automatic host and project metadata exfiltration during installation and import. This concrete behavior supports blocking independently of the scanner fingerprint.

Inspected source proves automatic local metadata exfiltration during installation and import, unrelated to functional internationalization behavior. The package's research claim does not...

Inspected source establishes automatic local metadata collection and transmission to an external endpoint during installation and import. This behavior supports blocking independently of...

Direct source inspection establishes automatic metadata exfiltration on installation and import. Package claims of an authorized test do not establish consumer consent or neutralize the a...

Inspected source establishes automatic host and project metadata exfiltration through both lifecycle and import entrypoints. The limited payload narrows the impact but does not neutralize...

OpenSSF Malicious Packages via OSV confirms exprrdd@5.2.2 as malicious (MAL-2026-17244): Malicious code in exprrdd (npm)

OpenSSF Malicious Packages via OSV confirms express-nodejs@5.2.2 as malicious (MAL-2026-17243): Malicious code in express-nodejs (npm)

OpenSSF Malicious Packages via OSV confirms express-javascript@5.2.2 as malicious (MAL-2026-17242): Malicious code in express-javascript (npm)