npm advisory reports, with evidence.

This is a concrete remote-code-execution loader activated by a normal import, with persistence-like detached process behavior. The lack of an install hook does not reduce the import-time...

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.1 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@3.7.0-rc-37 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms fulfillment-cuprum-auth-widget@1.0.0 as malicious (MAL-2026-16176): Malicious code in fulfillment-cuprum-auth-widget (npm)

OpenSSF Malicious Packages via OSV confirms discord-resolvers@3.4.2 as malicious (MAL-2026-16214): Malicious code in discord-resolvers (npm)

OpenSSF Malicious Packages via OSV confirms swnwall@1.2.10 as malicious (MAL-2026-16211): Malicious code in swnwall (npm)

OpenSSF Malicious Packages via OSV confirms @prime0/alanced-match@1.0.0 as malicious (MAL-2026-16204): Malicious code in @prime0/alanced-match (npm)

OpenSSF Malicious Packages via OSV confirms @prime0/pcomatch@1.0.0 as malicious (MAL-2026-16206): Malicious code in @prime0/pcomatch (npm)

OpenSSF Malicious Packages via OSV confirms @zaka13/thing@1.0.0 as malicious (MAL-2026-16200): Malicious code in @zaka13/thing (npm)

OpenSSF Malicious Packages via OSV confirms kartykp-prod-oidc-test-pkg@1.0.4 as malicious (MAL-2026-16197): Malicious code in kartykp-prod-oidc-test-pkg (npm)

OpenSSF Malicious Packages via OSV confirms plogme@1.0.2 as malicious (MAL-2026-16199): Malicious code in plogme (npm)

OpenSSF Malicious Packages via OSV confirms plogme@1.0.1 as malicious (MAL-2026-16199): Malicious code in plogme (npm)

OpenSSF Malicious Packages via OSV confirms plogme@1.0.0 as malicious (MAL-2026-16199): Malicious code in plogme (npm)

OpenSSF Malicious Packages via OSV confirms kartykp-prod-oidc-test-pkg@1.0.3 as malicious (MAL-2026-16197): Malicious code in kartykp-prod-oidc-test-pkg (npm)

OpenSSF Malicious Packages via OSV confirms kartykp-token-pkg@1.0.2 as malicious (MAL-2026-16198): Malicious code in kartykp-token-pkg (npm)

Direct source inspection confirms two automatic lifecycle hooks that exfiltrate local installation metadata to an external Discord webhook. This is concrete malicious install-time data ex...

Automatic install hooks transmit consumer environment identifiers to an unrelated external endpoint. This is concrete unsolicited data exfiltration, so the package should be blocked.

The source contains concrete targeted CSS beacons and a cookie-reading JavaScript payload with an external execution beacon. This is malicious browser-side data and credential targeting,...

The package disguises a large obfuscated command-and-network payload behind an inert middleware export and loads it at import time. Although there is no install hook, the reachable runtim...

OpenSSF Malicious Packages via OSV confirms csa-mfa@1.1.16 as malicious (MAL-2026-16175): Malicious code in csa-mfa (npm)