Loading npm security reports…
Skip to main contentMalware2026-09-23 04:40Malware2026-09-23 04:40Malware2026-09-23 03:10Malware2026-09-23 03:10
npm threat feed
npm security reports, with evidence.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 90
Updated 10 Oct 2026, 20:42 UTC. Ordered by latest scan.
epic-diesel-common@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-diesel-common@1.0.0 as malicious (MAL-2025-49132): Malicious code in epic-diesel-common (npm)
epic-diesel-affiliate@1.0.0
OpenSSF Malicious Packages via OSV confirms epic-diesel-affiliate@1.0.0 as malicious (MAL-2025-49130): Malicious code in epic-diesel-affiliate (npm)
moudeva@1.0.0
OpenSSF Malicious Packages via OSV confirms moudeva@1.0.0 as malicious (MAL-2026-16442): Malicious code in moudeva (npm)
my-company-device@0.1.0
OpenSSF Malicious Packages via OSV confirms my-company-device@0.1.0 as malicious (MAL-2026-16443): Malicious code in my-company-device (npm)
internallib_v550@1.0.1
OpenSSF Malicious Packages via OSV confirms internallib_v550@1.0.1 as malicious (MAL-2026-16439): Malicious code in internallib_v550 (npm)
