Loading npm security reports…
Skip to main contentMalware2026-09-25 05:40Malware2026-09-25 05:40Malware2026-09-25 05:40Malware2026-09-25 05:40
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 71
Updated 10 Oct 2026, 08:42 UTC. Ordered by latest scan.
epic-react-survey@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-react-survey@1.0.0 as malicious (MAL-2025-49185): Malicious code in epic-react-survey (npm)
epic-react-slick@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-react-slick@1.0.0 as malicious (MAL-2025-49184): Malicious code in epic-react-slick (npm)
epic-react-search@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-react-search@1.0.0 as malicious (MAL-2025-49183): Malicious code in epic-react-search (npm)
epic-react-form@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-react-form@1.0.0 as malicious (MAL-2025-49182): Malicious code in epic-react-form (npm)
epic-react-common@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-react-common@1.0.0 as malicious (MAL-2025-49181): Malicious code in epic-react-common (npm)