npm advisory reports, with evidence.

OpenSSF Malicious Packages via OSV confirms express-fork@5.2.2 as malicious (MAL-2026-17490): Malicious code in express-fork (npm)

OpenSSF Malicious Packages via OSV confirms css-a11y-contrast-utils@1.0.0 as malicious (MAL-2026-17475): Malicious code in css-a11y-contrast-utils (npm)

OpenSSF Malicious Packages via OSV confirms css-logical-prop-shim@1.0.0 as malicious (MAL-2026-17482): Malicious code in css-logical-prop-shim (npm)

OpenSSF Malicious Packages via OSV confirms chai-as-testmode@1.4.7 as malicious (MAL-2026-17473): Malicious code in chai-as-testmode (npm)

The active entrypoint connects ordinary middleware initialization to concealed remote code execution. The encoded endpoint, detached execution, and unrestricted response evaluation suppor...

Source proves automatic reconnaissance and external data transmission when the bundle is evaluated, unrelated to CSS reading-order functionality. The manifest loading paths make this exec...

Inspected source proves automatic reconnaissance and external data export when the registry payload loads. This is concrete malicious behavior unrelated to a CSS polyfill, despite the abs...

Inspected source proves automatic system reconnaissance and external data transmission unrelated to a CSS polyfill. This is an active data-exfiltration attack when the registry module is...

Inspected source establishes an automatic remote-payload execution attempt unrelated to the advertised buffer utilities. Execution defects and unavailable payload contents limit claims ab...

The inspected entrypoint directly downloads and executes a reverse-shell payload. This concrete attack behavior supports blocking despite the absence of an install hook.

Source proves automatic, remotely directed account mutation through the active entrypoint. This concrete attack supports blocking independently of scanner similarity labels or benign medi...

Source proves automatic, unconsented account changes controlled by a remote channel list. This concrete runtime abuse warrants blocking independently of the scanner similarity hints.

Direct source inspection establishes automatic reconnaissance and data exfiltration when the advertised registry script loads. This concrete attack behavior warrants blocking despite the...

Direct source inspection establishes automatic reconnaissance and external transmission unrelated to a CSS polyfill. The empty main entrypoint does not neutralize the executable payload s...

Inspected source establishes automatic host-data exfiltration through the registry module. The empty default entrypoint limits activation but does not neutralize the published executable...

Inspected source establishes automatic reconnaissance and data export when the registry module loads. The inert default entrypoint limits activation but does not neutralize the executable...

Inspected source proves automatic host-data collection and transmission when the registry script loads. This concrete exfiltration behavior warrants blocking despite the empty default ent...

Inspected source establishes automatic reconnaissance and external transmission when the published registry script loads. This behavior is unrelated to a CSS environment-function shim and...

Inspected source establishes automatic host-data collection and external transmission unrelated to CSS polyfilling. The empty default entrypoint and absence of install hooks limit activat...

Inspected source proves automatic shell-based reconnaissance and transmission of host data to a fixed unrelated recipient. The empty default entrypoint and absence of install hooks limit...