Loading npm security reports…
Skip to main contentMalware2026-09-24 09:35Malware2026-09-24 09:35Malware2026-09-24 09:35Malware2026-09-24 09:35
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 76
Updated 10 Oct 2026, 12:04 UTC. Ordered by latest scan.
ethers.jsonn@6.15.0
OpenSSF Malicious Packages via OSV confirms ethers.jsonn@6.15.0 as malicious (MAL-2026-11299): Malicious code in ethers.jsonn (npm)
eth.json@6.15.0
OpenSSF Malicious Packages via OSV confirms eth.json@6.15.0 as malicious (MAL-2026-11293): Malicious code in eth.json (npm)
ethe@99.15.0
OpenSSF Malicious Packages via OSV confirms ethe@99.15.0 as malicious (MAL-2026-11294): Malicious code in ethe (npm)
aave-improvement-process@99.99.99
OpenSSF Malicious Packages via OSV confirms aave-improvement-process@99.99.99 as malicious (MAL-2025-6395): Malicious code in aave-improvement-process (npm)
socketi@1.0.1
OpenSSF Malicious Packages via OSV confirms socketi@1.0.1 as malicious (MAL-2026-11382): Malicious code in socketi (npm)