Project
The default public registry for JavaScript and Node.js packages, hosting millions of open-source modules installed and published via the npm command-line tool.
According to a GitHub issue on REA, a fake rea-tools repo offered a Windows exe that 8 of 45 VirusTotal engines flag, with 172 downloads. The copy shipped a binary and no npm package was reported, so the npx risk is a next-attack scenario; two checks on repo name and creation dates would have caught this one.
Reality
Databricks says its LLM pipeline fails to reach a decisive malicious verdict on 14.4% of npm malware that bundles a binary, against 6.2% for source-only packages. Those binary packages are 432 of 11,413 scanned versions, and Databricks tests feeding the model pre-computed static evidence as the fix.
Reality
HISTOR started 12,915 npm and PyPI MCP servers in a sandbox, and 5,259 (41%) never answered, according to its own post. About 24% were broken or not stdio servers at all. Another 16% depended on keys, flags or runtimes a client config can supply.
Reality
A developer says a fake-recruiter take-home bundled an npm token to fetch a hidden package, in a scheme a government advisory counts at 30,000+ machines. The author ran nothing and never read the hidden package, so its payload is inferred from structure.
Reality
Bloom Security counted more than 1,500 npm packages exposed because Trusted Publishing bound publish rights to a GitHub repository name. GitHub says it has shipped fixes, and Bloom's Golan Myers said it is unknown whether anyone exploited the flaw.
Perspective Coverage
3 publishersReality
In one developer's test, OpenCode 1.19.0's upgrade to v2 left two v1 plugin copies unloaded while the session kept running. The post's loud, silent, absent summary of the three breaking changes does not match its own logs.
Reality
Bloom Security found more than 1,500 npm packages, with over 10 million downloads, vulnerable to a publishing attack that needs no stolen credentials. Bloom also put AI-agent installs at about 70 packages a month on a typical endpoint, but its demonstration used only repositories its researchers controlled.
Reality
pnpm, npm, Bun and Yarn can each refuse versions younger than a set age, using minutes, days, seconds and minutes respectively. Pasting pnpm's 1440 into npm makes the cooldown 1440 days, roughly 3.9 years.
Reality
ngx-daterangepicker-material, downloaded about 250,000 times a month, now has a release for each Angular major from 16 to 22. About 7 in 10 installs are still on v6, and a ^6.0.4 range will not move them, so each team has to pick its major by hand.
Reality
Tensorlake's npm SDK 0.5.144 carried a Shai-Hulud worm on October 8 that steals GitHub and npm tokens, cloud keys and AI coding-tool configs. A dev.to write-up of StepSecurity's teardown says revoking the stolen GitHub token triggers an rm -rf ~/, so the service must go first.
Reality
Malicious commits landed in three GitHub repos, including Zod, yet npm's scanner held the only bad release submitted, @nubjs/nub@0.9.4. That outcome says little about whether a consuming team's own lockfile and install settings would have held.
Reality
A HackerOne report says DuckDuckGo's semver-label.yml ran code from any forked pull request with secrets in its environment. Any team can search its own workflows for pull_request_target to find the same pattern.
Reality
Next.js will ship an out-of-band security update on October 14 for three upstream dependency vulnerabilities, two rated Critical and one High. Until then, the useful preparation is confirming which Next.js build each production app actually serves.
Reality
Tensorlake's npm SDK 0.5.144 runs a credential-stealing worm from a preinstall hook at install time, Socket reported. According to Socket's analysis, any secret reachable from a workstation or build runner that installed the release may be exposed.
Perspective Coverage
4 publishersReality
Checkmarx says function-flag, malicious since July 2025 and downloaded more than 37,000 times, is still on npm with no advisory flagging it. Advisory-based scanners have nothing to match, so finding it means checking lockfiles for the campaign's eight names.
Perspective Coverage
3 publishersReality
Unit 42 says supply-chain attackers have moved command-and-control into blockchain smart contracts, so one transaction can re-point an entire botnet or worm. Defenders' useful choke points are now developer machines, CI runners and the chain lookup itself.
Reality
CrowdSec kept a leaver's GitHub access open so he could finish some work, his laptop was hit by the TanStack npm compromise on May 11, and the repositories were copied on May 22 and posted to a forum on September 16.
Perspective Coverage
4 publishersReality
Electron Forge 8 flags six breaking changes, including a move to Node 22 and ESM and the removal of global module templates. Its npm trusted publishing entry concerns how maintainers ship Forge, so app teams' work lands in their runtime and config.
Reality
Attackers hid the malware trigger in the indexed-btree npm package inside a library method, sidestepping the install-script block npm 12 shipped in July. Install-time checks, including a look at package.json for hooks, pass a package that runs its payload on first use.
Reality
GitHub flagged six npm typosquats of Angular that claimed the live 22.2.1 version, five pulling a payload through the Wayback Machine. With the version number now correct, the defence has to sit at the package name and at whether install scripts run at all.
Reality
Security · September 30, 2026 · Confirmed2 publishers
Security · September 29, 2026 · Confirmed2 publishers
Security · September 25, 2026 · Confirmed2 publishers
Security · September 23, 2026 · Confirmed2 publishers
Security · August 25, 2026 · Confirmed2 publishers
Build · August 31, 2026 · Confirmed2 publishers
Security · September 1, 2026 · Confirmed4 publishers
Security · September 25, 2026 · One report1 publisher
Security · September 18, 2026 · Confirmed2 publishers
Security · September 21, 2026 · Confirmed2 publishers
Security · September 20, 2026 · Confirmed3 publishers
Security · September 18, 2026 · Confirmed8 publishers
Security · September 23, 2026 · Confirmed2 publishers