npm advisory reports, with evidence.

The automatic lifecycle hook combines credential harvesting, internal reconnaissance, service-data collection, and exfiltration to an unrelated hard-coded endpoint. This is concrete malic...

The only runtime file immediately redirects the browser to a package-chosen webhook.site URL with document.cookie appended, using split strings to hide the sink. That is active cookie exf...

OpenSSF Malicious Packages via OSV confirms oracle-redis@5.11.3 as malicious (MAL-2026-16390): Malicious code in oracle-redis (npm)

OpenSSF Malicious Packages via OSV confirms noverojava@1.1.0 as malicious (MAL-2026-16389): Malicious code in noverojava (npm)

OpenSSF Malicious Packages via OSV confirms noverojava@1.0.9 as malicious (MAL-2026-16389): Malicious code in noverojava (npm)

An npm install script and the package entrypoint both run an obfuscated probe that encodes the username, hostname, and working-directory name into a DNS lookup for oob.algamil7x.xyz. That...

Install and import both execute an obfuscated DNS lookup that embeds local username, hostname, and project directory into a query for oob.algamil7x.xyz. That is concrete environment exfil...

Load-time execution in the main and CLI bundles extracts a concealed command from a bundled JPEG and runs it through hidden PowerShell, which is a concrete remote-code dropper. The readab...

The install script and package entry are wired to an obfuscated probe that DNS-resolves a hostname containing the username, hostname, and directory name to oob.algamil7x.xyz. That is inst...

The install hook and package entry load obfuscated code that DNS-exfiltrates host and directory identity to oob.algamil7x.xyz. The web-component exports do not account for that hidden loo...

The install entry unconditionally runs an obfuscated identity beacon to oob.algamil7x.xyz, which is unrelated to the GTM dataLayer API. Char-code hiding, swallowed errors, and a fake diag...

OpenSSF Malicious Packages via OSV confirms @mr-supun-fernando/supunmd-bail@3.0.3 as malicious (MAL-2026-16387): Malicious code in @mr-supun-fernando/supunmd-bail (npm)

OpenSSF Malicious Packages via OSV confirms tlxbnhd@0.0.1 as malicious (MAL-2026-16385): Malicious code in tlxbnhd (npm)

OpenSSF Malicious Packages via OSV confirms tldriver@0.0.1 as malicious (MAL-2026-16384): Malicious code in tldriver (npm)

OpenSSF Malicious Packages via OSV confirms mxdriver@0.0.2 as malicious (MAL-2026-16383): Malicious code in mxdriver (npm)

OpenSSF Malicious Packages via OSV confirms mxdriver@0.0.1 as malicious (MAL-2026-16383): Malicious code in mxdriver (npm)

OpenSSF Malicious Packages via OSV confirms cisco-github-simple@1.0.1 as malicious (MAL-2026-16381): Malicious code in cisco-github-simple (npm)

OpenSSF Malicious Packages via OSV confirms chai-logger@3.0.2 as malicious (MAL-2026-16380): Malicious code in chai-logger (npm)

The install lifecycle loads obfuscated probe code that sends username, hostname, and directory labels through DNS to oob.algamil7x.xyz. That is install-time data exfiltration, independent...

The package ships a hardcoded curl-to-shell remote execution path and a caller that invokes it, including a CI job that updates from a local registry first. There is no install lifecycle...