npm scope
@404c3s4r
LPM Firewall blocks 2 packages in the @404c3s4r npm scope.
Sep 24, 2026
@404c3s4r/testxxx@9.2.0
MalwareOpenSSF Malicious Packages via OSV confirms @404c3s4r/testxxx@9.2.0 as malicious (MAL-2026-11207): Malicious code in @404c3s4r/testxxx (npm)
Aug 2, 2026
@404c3s4r/lodash@9.0.0
MalwareOpenSSF Malicious Packages via OSV confirms @404c3s4r/lodash@9.0.0 as malicious (MAL-2026-11434): Malicious code in @404c3s4r/lodash (npm)
Each card opens the package page with its evidence and every recorded version.