npm advisory reports, with evidence.

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.8.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.7.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.6.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.5.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.4.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.3.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.2.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.1.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@0.0.0 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@2100.4.2 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms epic-alt-utils@1.4.15 as malicious (MAL-2025-49115): Malicious code in epic-alt-utils (npm)

OpenSSF Malicious Packages via OSV confirms evm-validation@1.0.4 as malicious (MAL-2026-14301): Malicious code in evm-validation (npm)

OpenSSF Malicious Packages via OSV confirms bigops-auth-interceptor@35.7.2 as malicious (MAL-2026-12151): Malicious code in bigops-auth-interceptor (npm)

OpenSSF Malicious Packages via OSV confirms @gsutevil/hta-stage@1.62.0 as malicious (MAL-2026-16419): Malicious code in @gsutevil/hta-stage (npm)

OpenSSF Malicious Packages via OSV confirms @lekzo/baileys@0.0.7 as malicious (MAL-2026-16276): Malicious code in @lekzo/baileys (npm)

OpenSSF Malicious Packages via OSV confirms envforge2@1.0.1 as malicious (MAL-2026-16392): Malicious code in envforge2 (npm)

OpenSSF Malicious Packages via OSV confirms envforge3@1.0.1 as malicious (MAL-2026-16393): Malicious code in envforge3 (npm)

OpenSSF Malicious Packages via OSV confirms envparse2@1.0.1 as malicious (MAL-2026-16394): Malicious code in envparse2 (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-form-styles@0.5.1 as malicious (MAL-2026-16405): Malicious code in tailwind-form-styles (npm)

OpenSSF Malicious Packages via OSV confirms eslint-config-compact-utils@1.0.2 as malicious (MAL-2026-16417): Malicious code in eslint-config-compact-utils (npm)