PkgRadar

npm · registry.npmjs.org

px8my

no static findings

Early detection

PkgRadar flagged this 15.7 days before public disclosure

Detected 2026-06-24 · disclosed as MAL-2026-10104 on 2026-07-09

Scanned versions

VersionVerdictScoreScanned (UTC)
1.0.43Low risk02026-07-11
1.0.23High risk02026-07-11
1.0.32High risk02026-07-10
1.0.42Low risk02026-07-10
1.0.41Low risk02026-07-10
1.0.40Low risk02026-07-09
1.0.39Low risk02026-07-09
1.0.37Low risk02026-07-08
1.0.38Low risk02026-07-08
1.0.36Low risk02026-07-07
1.0.35Low risk02026-07-07
1.0.34Low risk02026-07-06
1.0.33Low risk02026-07-06
1.0.31Low risk02026-07-05
1.0.30Low risk02026-07-05
1.0.29Low risk02026-07-04
1.0.28Low risk02026-07-04
1.0.27Low risk02026-07-03
1.0.26Low risk02026-07-03
1.0.25Low risk02026-07-02
1.0.24Low risk02026-07-01
1.0.22Low risk02026-06-30
1.0.21Low risk02026-06-29
1.0.20Low risk02026-06-29
1.0.19Low risk02026-06-28
1.0.18Low risk02026-06-27
1.0.17Low risk02026-06-26
1.0.16Review102026-06-25
1.0.15Review102026-06-25
1.0.14Review102026-06-25
1.0.13Review102026-06-24
1.0.12Review102026-06-23
1.0.11Review102026-06-22
1.0.10Review102026-06-21
1.0.9Review102026-06-21
1.0.8Review102026-06-21
1.0.7Review102026-06-20
1.0.6Review102026-06-20
1.0.5Review102026-06-19
1.0.4Review102026-06-19
1.0.3Review102026-06-18
1.0.2Review102026-06-18
1.0.1Review102026-06-18
1.0.0Review102026-06-18

Block this in CI

PkgRadar gates px8my (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm [email protected]
Start free — 25 scans / moView full evidence
px8my — npm malware advisory | PkgRadar