npm advisory reports, with evidence.

This is a concealed remote code execution chain unrelated to a Tailwind forms plugin. The absence of install hooks does not mitigate execution on normal package import.

OpenSSF Malicious Packages via OSV confirms html-to-gutenberg@4.2.21 as malicious (MAL-2026-6359): Malicious code in html-to-gutenberg (npm)

This package has no functional code but uses two unconsented automatic lifecycle hooks to exfiltrate host and CI information. The behavior is concrete install-time data collection and war...

This is concrete, unconsented install-time host data exfiltration with no corresponding package functionality. It is malicious install-hook abuse.

This package has no functional implementation but automatically exfiltrates host and CI-related metadata at install time. The behavior is concrete, unconsented, and unrelated to a legitim...

OpenSSF Malicious Packages via OSV confirms strapi-plugin-osag@3.6.8 as malicious (MAL-2026-16235): Malicious code in strapi-plugin-osag (npm)

OpenSSF Malicious Packages via OSV confirms strapi-plugin-os-rec@3.6.8 as malicious (MAL-2026-16234): Malicious code in strapi-plugin-os-rec (npm)

This is concrete, unconsented install-time host-data exfiltration to a fixed external endpoint. The inert JavaScript file does not mitigate the lifecycle-hook behavior.

The package contains an import-time detached remote-code execution chain unrelated to its advertised utility purpose. This is concrete malicious behavior even without an npm lifecycle hook.

This is concrete credential exfiltration and remotely controlled code execution on import. The Base64 endpoint encoding further conceals the behavior.

The package contains a concrete automatic install-time host-fingerprinting callback to a third-party endpoint. Its simple runtime export does not justify or mitigate that behavior.

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.4 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.3 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.2 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.1 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.1.0 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

OpenSSF Malicious Packages via OSV confirms jexkcode@1.0.1 as malicious (MAL-2026-16220): Malicious code in jexkcode (npm)

This is a concrete remote-code-execution loader activated by a normal import, with persistence-like detached process behavior. The lack of an install hook does not reduce the import-time...

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.1 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.0-rc-37 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@1.0.0 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)