Gatekeeper: live npm malware monitor

Try it: watch a Muse agent read any npm package · Our reports to OpenSSF

Every new npm release, checked statically by rules, a fast classifier and Meta models (Muse Spark, Muse Glimmer). Running since 2026-10-27; last run 2026-10-31T07:28 UTC.

355,751versions checked
74,442archives scanned
7,644flagged for model review
1,171read by the Muse investigator (991 cleared)
16independently confirmed malicious packages
1.4 minmedian publish to flag
16flagged before the public report (median lead 20.0 h)

Confirmed catches

Flag time vs. first public report per confirmed package

Only detections confirmed by OSV / OpenSSF, GitHub advisories or an npm takedown are named. Flag times are committed as salted hashes to the public ledger when they happen.

packagefirst published (UTC)publish to flagahead of the public reportpublic records
@webapp-shared/login-vmok
5 versions: 1.0.0, 99.0.1, 1.0.1, 1.1.0 ...		2026-10-27 17:081.0 min to 1.6 min13.1 hGHSA-cmqx-q58q-9m8p MAL-2026-18356
identity-two-factor
1 version: 999.0.0		2026-10-28 06:561.8 min25.6 hMAL-2026-18367
spectral-net-probe
1 version: 1.0.10		2026-10-28 08:101.6 min24.5 hMAL-2026-18368
cjlowuxbnexkhgpzq
1 version: 1.0.0		2026-10-28 09:040.1 min29.3 hGHSA-pr23-gvcv-c422 MAL-2026-18381
@zmtcdn/components
1 version: 9999.0.0		2026-10-28 09:542.0 min23.2 hMAL-2026-18372
@zmtcdn/ui
1 version: 9999.0.7		2026-10-28 09:580.0 min23.1 hGHSA-g2vv-m33m-p9qf MAL-2026-18373
black-spindle
1 version: 999.0.0		2026-10-28 16:110.9 min59.9 minMAL-2026-18359
black-spindle-2
3 versions: 100.0.0, 301.0.0, 302.0.0		2026-10-28 16:440.0 min to 1.8 min22.4 h to 22.7 hGHSA-qcg8-4xw5-5ccq MAL-2026-18376
spectral-core
10 versions: 3.0.2, 3.0.3, 3.0.4, 3.0.5 ...		2026-10-28 19:220.2 min to 3.3 min17.8 h to 19.8 hGHSA-jpgq-34qx-jwwc MAL-2026-18377
@dmangal/curse-dependent-ecto
3 versions: 99999.0.0, 99999.0.1, 99999.0.2		2026-10-28 21:590.3 min to 1.5 min16.9 h to 17.2 hGHSA-prqg-vvv3-2xf8 MAL-2026-18375
@pcb-dp/qa-commons
2 versions: 1.0.0, 1.0.10		2026-10-29 15:310.9 min to 29.3 min18.7 h to 26.1 hGHSA-w4v4-fj9q-cfj5
dependencykfeg
6 versions: 25.1.3, 25.1.9, 25.2.1, 1.5.6 ...		2026-10-29 21:481.7 min to 15.1 h7.3 h to 20.1 hGHSA-7p3p-8gfg-8grq
@sxm-content-creators/tools-ds
1 version: 1.0.1		2026-10-29 22:411.2 min19.4 hGHSA-x4jx-pc3h-93v6
ssite-mock-server
1 version: 0.0.1		2026-10-29 23:370.4 min18.5 hGHSA-h5wr-6cx4-x5v4
claims-acct-unlock
1 version: 25.2.1		2026-10-30 06:550.8 min41.0 minMAL-2026-18404
tailwindcss-visual-kit
1 version: 1.3.7		2026-10-29 20:2514.7 h90.0 minGHSA-f37w-2g4f-58r3

What it missed

Every hour, each new OSV report of npm malware is checked against the monitor's own logs. Of the 25 malicious packages published while it was running (since 2026-10-27 14:02 UTC), it flagged 15 (60%), 15 of them before the report. Reports about malware published before the monitor started (86) are left out. Nor are 7 reported packages whose only public version was a placeholder with no code in it: there was nothing to read.

missed packagepublished (UTC)what the monitor sawreport
agentenact2026-10-27 20:17metadata only, score 1: archive not downloadedMAL-2026-18346
glyphmatrix-fixture2026-10-28 00:18archive scanned, score 2 (metadata 2, code 0); not sent to a modelMAL-2026-18355
b20miner2026-10-28 21:59metadata only, score 1: archive not downloadedMAL-2026-18365
dsh-redteam-mode2026-10-28 07:48metadata only, score 0: archive not downloadedMAL-2026-18366
dsh-volcengine-provider2026-10-27 18:20archive scanned, score 1 (metadata 1, code 0); not sent to a modelMAL-2026-18374
@testsecuiitytestme/cache-helper2026-10-27 12:28archive scanned, score 5 (metadata 5, code 0); not sent to a modelMAL-2026-18358
react-native-drago-callkit2026-10-28 18:40archive scanned, score 8 (metadata 4, code 4); not sent to a modelMAL-2026-18394
orderbook-volt-plugin2026-10-28 21:03archive scanned, score 5 (metadata 5, code 0); not sent to a modelMAL-2026-18393
@nexlayerlabs/postcss-keyframe-utils2026-10-29 19:38npm published 2026-10-29T19:38MAL-2026-18407
@tops2/digital-assistant-uiosv published 2026-10-30T18:06:15ZMAL-2026-18415

Daily volume

day (UTC)versionsscannedflagged
2026-10-3120,0446,030768
2026-10-3096,04929,7965,143
2026-10-2984,21415,164697
2026-10-28101,98615,163729
2026-10-2753,4588,289307

Open source: https://github.com/lb2002/gatekeeper · JSON: stats.json