PkgRadar

Malware advisory

MAL-2026-10705

Malicious code in @agent-link/agent (npm)

33 affected releases in the PkgRadar corpus · published 2026-07-16 · upstream advisory

Affected packages

Every release listed here is malicious per this advisory and is blocked at the CI gate. The Static scancolumn is PkgRadar’s independent static-analysis result for that release — some malicious releases score low on static signals alone, which is why we also mirror the advisory as authoritative.

PackageEcosystemVersionStatic scanScanned (UTC)
@agent-link/agentnpm0.1.312High risk2026-08-24
@agent-link/agentnpm0.1.280High risk2026-08-24
@agent-link/agentnpm0.1.308High risk2026-08-23
@agent-link/agentnpm0.1.285High risk2026-08-23
@agent-link/agentnpm0.1.281High risk2026-08-23
@agent-link/agentnpm0.1.283High risk2026-08-23
@agent-link/agentnpm0.1.277High risk2026-08-22
@agent-link/agentnpm0.1.293High risk2026-08-22
@agent-link/agentnpm0.1.269High risk2026-08-22
@agent-link/agentnpm0.1.304High risk2026-08-21
@agent-link/agentnpm0.1.311High risk2026-08-21
@agent-link/agentnpm0.1.299High risk2026-08-21
@agent-link/agentnpm0.1.292High risk2026-08-20
@agent-link/agentnpm0.1.307High risk2026-08-19
@agent-link/agentnpm0.1.289High risk2026-08-19
@agent-link/agentnpm0.1.314High risk2026-08-19
@agent-link/agentnpm0.1.298High risk2026-08-18
@agent-link/agentnpm0.1.310High risk2026-08-18
@agent-link/agentnpm0.1.294High risk2026-08-18
@agent-link/agentnpm0.1.272High risk2026-08-17
@agent-link/agentnpm0.1.270High risk2026-08-17
@agent-link/agentnpm0.1.275High risk2026-08-17
@agent-link/agentnpm0.1.303High risk2026-08-17
@agent-link/agentnpm0.1.274High risk2026-08-17
@agent-link/agentnpm0.1.279High risk2026-08-16
@agent-link/agentnpm0.1.278High risk2026-08-15
@agent-link/agentnpm0.1.302High risk2026-08-14
@agent-link/agentnpm0.1.296High risk2026-08-13
@agent-link/agentnpm0.1.287High risk2026-08-12
@agent-link/agentnpm0.1.282High risk2026-08-11
@agent-link/agentnpm0.1.273High risk2026-08-10
@agent-link/agentnpm0.1.284High risk2026-08-09
@agent-link/agentnpm0.1.271High risk2026-08-08

PkgRadar blocks these releases at the CI gate before they reach your build. Start free or see all advisories.

Malicious code in @agent-link/agent (npm) — malware advisory MAL-2026-10705 | PkgRadar