npm advisory reports, with evidence.

OpenSSF/OSV malware advisory MAL-2026-15869 blocks this version. Package bin/main script, invoked as `npx -y mcp-consultasdeveiculos-client --token <value>` per the referenced upstream pr...

OpenSSF/OSV malware advisory MAL-2026-15869 blocks this version. Package bin/main script, invoked as `npx -y mcp-consultasdeveiculos-client --token <value>` per the referenced upstream pr...

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14999 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. The package was found to contain malicious code or consuming dependency that contains malicious code

OpenSSF/OSV malware advisory MAL-2026-14551 blocks this version. LPM AI assessed this version as suspicious; the assessments disagree. The package was found to contain malicious code or c...

OpenSSF/OSV malware advisory MAL-2026-15866 blocks this version. package.json at line 14 declares a runtime dependency `microfrontend` whose source is a bare HTTPS URL (`https://repo.arti...

OpenSSF/OSV malware advisory MAL-2026-15867 blocks this version. package.json declares a dependency whose key equals the package's own name (@bx-ui-framework/common) and whose value is a...

OpenSSF/OSV malware advisory MAL-2026-15868 blocks this version. package.json declares a runtime dependency `microfrontend` whose source is a bare HTTPS URL at `https://repo.artifactoryma...