@activepieces
LPM Firewall blocks 4 packages in the @activepieces npm scope. 2 have LPM's own review and are listed first.
OpenSSF Malicious Packages via OSV confirms @activepieces/piece-google-bigquery@0.0.6 as malicious (MAL-2026-13394): Malicious code in @activepieces/piece-google-bigquery (npm)
OpenSSF Malicious Packages via OSV confirms @activepieces/piece-google-forms@0.5.7 as malicious (MAL-2026-13396): Malicious code in @activepieces/piece-google-forms (npm)
OpenSSF Malicious Packages via OSV confirms @activepieces/piece-base44@0.1.7 as malicious (MAL-2026-13408): Malicious code in @activepieces/piece-base44 (npm)
OpenSSF Malicious Packages via OSV confirms @activepieces/piece-google-contacts@0.4.8 as malicious (MAL-2026-13395): Malicious code in @activepieces/piece-google-contacts (npm)