Loading npm security reports…
Skip to main contentMalware2026-09-24 09:30Malware2026-09-24 09:30Malware2026-09-24 09:30Malware2026-09-24 09:30
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 78
Updated 10 Oct 2026, 13:02 UTC. Ordered by latest scan.
@client-web-next/utils@0.0.1
OpenSSF Malicious Packages via OSV confirms @client-web-next/utils@0.0.1 as malicious (MAL-2026-16514): Malicious code in @client-web-next/utils (npm)
@client-web-next/ui-business@0.0.1
OpenSSF Malicious Packages via OSV confirms @client-web-next/ui-business@0.0.1 as malicious (MAL-2026-16513): Malicious code in @client-web-next/ui-business (npm)
@client-web-next/ua-parser@0.0.1
OpenSSF Malicious Packages via OSV confirms @client-web-next/ua-parser@0.0.1 as malicious (MAL-2026-16511): Malicious code in @client-web-next/ua-parser (npm)
@client-web-next/transfer-state@0.0.1
OpenSSF Malicious Packages via OSV confirms @client-web-next/transfer-state@0.0.1 as malicious (MAL-2026-16510): Malicious code in @client-web-next/transfer-state (npm)