npm advisory reports, with evidence.

OpenSSF Malicious Packages via OSV confirms sql-limit-enforcer@10.0.0 as malicious (MAL-2026-16151): Malicious code in sql-limit-enforcer (npm)

OpenSSF Malicious Packages via OSV confirms web-main@22.1.2 as malicious (MAL-2026-16153): Malicious code in web-main (npm)

OpenSSF Malicious Packages via OSV confirms postgreesqlhelper@1.0.3 as malicious (MAL-2026-16150): Malicious code in postgreesqlhelper (npm)

OpenSSF Malicious Packages via OSV confirms discord-mfa-solver@1.0.3 as malicious (MAL-2026-16100): Malicious code in discord-mfa-solver (npm)

OpenSSF Malicious Packages via OSV confirms @aiwfm/communitywfm.scripts.api@28.1.28 as malicious (MAL-2026-16146): Malicious code in @aiwfm/communitywfm.scripts.api (npm)

OpenSSF Malicious Packages via OSV confirms tailwindcss-contact-forms@0.6.2 as malicious (MAL-2026-16124): Malicious code in tailwindcss-contact-forms (npm)

The package contains an exported runtime path that exfiltrates supplied phone numbers to an unrelated host with a deliberately abusive header. Although not automatic, this is concrete mal...

This is a concrete remote code execution path concealed behind an exported middleware and detached subprocess. The absence of an install hook does not mitigate runtime execution of server...

The declared runtime entrypoint directly invokes an obfuscated remote-binary downloader and process launcher. The absence of a lifecycle script limits the install-time trigger but does no...

This is a concrete automatic install-time payload chain: obfuscated code downloads and detaches a remote executable. The behavior is unrelated to the package's stated API-wrapper role.

This package contains an automatic, deliberately obfuscated installer that conditionally downloads and executes an external binary. That is a concrete malicious install-hook chain unrelat...

The package implements an import-triggered detached remote-code loader rather than a bounded client feature. Its remote payload receives Node module-loading capability, establishing concr...

The automatic lifecycle hook performs obfuscated remote payload download and detached execution, which is concrete malware behavior. The normal-looking Roblox wrapper code does not mitiga...

This is concrete remote code execution activated by a normal import, with detached-process persistence. The absence of an install lifecycle hook does not mitigate the import-time payload...

The package establishes an import-triggered detached process that fetches and executes remotely supplied code. This is concrete remote code execution and persistence-like behavior, not a...

The complete remote-code execution path is present in the published source and activates on ordinary import. Detached execution and PID tracking add persistence behavior.

The package implements an import-triggered detached remote-code loader, not a bounded package feature. The absence of an npm lifecycle hook does not mitigate runtime arbitrary code execut...

Direct inspection confirms an automatic preinstall hook that fingerprints the host and exfiltrates the values over HTTP. This is concrete malicious install-hook abuse.

The package contains a concrete, exposed phone-number exfiltration path to an unrelated host with an abusive custom header. Its benign version-check preinstall hook does not mitigate that...

This is a concrete remote code execution backdoor activated through the package's normal export. Concealment, detached execution, and remote dynamic evaluation leave no package-aligned be...