npm scope

@0xlr

LPM Firewall blocks 7 packages in the @0xlr npm scope.

Aug 3, 2026

@0xlr/sentry-web@999.0.0

OpenSSF Malicious Packages via OSV confirms @0xlr/sentry-web@999.0.0 as malicious (MAL-2026-5387): Malicious code in @0xlr/sentry-web (npm)

Aug 3, 2026

@0xlr/stripe-checkout-js@999.0.0

Malware

OpenSSF Malicious Packages via OSV confirms @0xlr/stripe-checkout-js@999.0.0 as malicious (MAL-2026-5388): Malicious code in @0xlr/stripe-checkout-js (npm)

Aug 3, 2026

@0xlr/stripe-frontend@999.0.0

Malware

OpenSSF Malicious Packages via OSV confirms @0xlr/stripe-frontend@999.0.0 as malicious (MAL-2026-5389): Malicious code in @0xlr/stripe-frontend (npm)

Aug 3, 2026

@0xlr/supabase-db@999.0.0

Malware

OpenSSF Malicious Packages via OSV confirms @0xlr/supabase-db@999.0.0 as malicious (MAL-2026-5390): Malicious code in @0xlr/supabase-db (npm)

Aug 3, 2026

@0xlr/vercel-analytics@999.0.0

Malware

OpenSSF Malicious Packages via OSV confirms @0xlr/vercel-analytics@999.0.0 as malicious (MAL-2026-5391): Malicious code in @0xlr/vercel-analytics (npm)

Aug 2, 2026

@0xlr/clerk-auth@999.0.0

Malware

OpenSSF Malicious Packages via OSV confirms @0xlr/clerk-auth@999.0.0 as malicious (MAL-2026-5385): Malicious code in @0xlr/clerk-auth (npm)

Aug 2, 2026

@0xlr/prisma-client-js@999.0.0

Malware

OpenSSF Malicious Packages via OSV confirms @0xlr/prisma-client-js@999.0.0 as malicious (MAL-2026-5386): Malicious code in @0xlr/prisma-client-js (npm)