npm advisory reports, with evidence.

OpenSSF Malicious Packages via OSV confirms tailwindcss-form-utils@0.5.1 as malicious (MAL-2026-16263): Malicious code in tailwindcss-form-utils (npm)

OpenSSF Malicious Packages via OSV confirms tailwindcss-form-ui@0.5.1 as malicious (MAL-2026-16262): Malicious code in tailwindcss-form-ui (npm)

OpenSSF Malicious Packages via OSV confirms kartykgithub-takedown-a@1.0.3 as malicious (MAL-2026-16248): Malicious code in kartykgithub-takedown-a (npm)

OpenSSF Malicious Packages via OSV confirms kartykgithub-takedown-a@1.0.0 as malicious (MAL-2026-16248): Malicious code in kartykgithub-takedown-a (npm)

OpenSSF Malicious Packages via OSV confirms sql-limit-enforcer@10.0.1 as malicious (MAL-2026-16151): Malicious code in sql-limit-enforcer (npm)

OpenSSF Malicious Packages via OSV confirms confx1789550882@1.0.0 as malicious (MAL-2026-16260): Malicious code in confx1789550882 (npm)

The main entrypoint is an import-time IIFE that hunts local flag and admin pages and POSTs the results to webhook.site. That is a complete exfiltration chain even without npm install hooks.

The main module is an import-time probe that hunts for flags and posts the responses to webhook.site. That is concrete exfiltration, not a legitimate package feature.

The declared entrypoint performs direct, unconsented data exfiltration to a fixed third-party endpoint. The absence of lifecycle hooks does not remove the import-time attack surface.

The package's import-time entrypoint exfiltrates profile content and diagnostics to an unrelated external webhook. The absence of an install hook does not mitigate this concrete runtime d...

index.js is a side-effecting import-time fetch that forwards remote profile data and errors to webhook.site, which is a concrete exfiltration sink rather than a library. Empty metadata an...

The only source file is an import-time fetch of /profile that posts the body or error details to webhook.site. That is concrete data exfiltration, not package-aligned networking.

The only runtime code is an import-time steal of /profile posted to webhook.site, which is concrete data theft rather than a library. Empty metadata and a main entry that only performs th...

OpenSSF Malicious Packages via OSV confirms idx_form_script@999.0.2 as malicious (MAL-2026-16243): Malicious code in idx_form_script (npm)

The published main module is only an import-time probe of secret and admin paths that posts their contents to /addPost. That is concrete data theft, so the package should be blocked even...

OpenSSF Malicious Packages via OSV confirms kartykgithub-takedown-a@1.0.1 as malicious (MAL-2026-16248): Malicious code in kartykgithub-takedown-a (npm)

OpenSSF Malicious Packages via OSV confirms kartykgithub-takedown-b@1.0.0 as malicious (MAL-2026-16249): Malicious code in kartykgithub-takedown-b (npm)

OpenSSF Malicious Packages via OSV confirms kartykgithub-takedown-a@1.0.2 as malicious (MAL-2026-16248): Malicious code in kartykgithub-takedown-a (npm)

The executable entry point harvests browser page data and transmits flag-like values or markup without an application-facing API or stated purpose. This is concrete data exfiltration beha...

Inspected source shows import-time localStorage token theft and a fetch POST with no legitimate widget code. That is concrete credential exfiltration, so the package is blocked.

index.js is an import-time localStorage thief that POSTs the dump to /addPost, with no legitimate helper surface. That is concrete client-side exfiltration, not a noisy network primitive.