npm scope
@addai
LPM Firewall blocks 3 packages in the @addai npm scope. 2 have LPM's own review and are listed first.
Aug 6, 2026
@addai/ainode@0.3.0
MalwareOpenSSF Malicious Packages via OSV confirms @addai/ainode@0.3.0 as malicious (MAL-2026-13409): Malicious code in @addai/ainode (npm)
Aug 6, 2026
@addai/entity-runtime@0.2.51
MalwareOpenSSF Malicious Packages via OSV confirms @addai/entity-runtime@0.2.51 as malicious (MAL-2026-13410): Malicious code in @addai/entity-runtime (npm)
Aug 6, 2026
@addai/node@0.11.2
MalwareOpenSSF Malicious Packages via OSV confirms @addai/node@0.11.2 as malicious (MAL-2026-13411): Malicious code in @addai/node (npm)
Each card opens the package page with its evidence and every recorded version.