@adminide-stack
LPM Firewall blocks 6 packages in the @adminide-stack npm scope. 4 have LPM's own review and are listed first.
OpenSSF Malicious Packages via OSV confirms @adminide-stack/yantra-help-browser@12.0.194 as malicious (MAL-2026-18644): Malicious code in @adminide-stack/yantra-help-browser (npm)
The main entry runs concealed code automatically on import and executes JavaScript retrieved from dynamically discovered hosts. This is concrete remote code execution unrelated to the pac...
The package entry point automatically evaluates concealed Base64 code, and the hidden routine includes another eval and a Node script spawning path. This is an import-time loader unrelate...
The main entry point appends an obfuscated base64 payload that executes at import time and retrieves and runs remote code using a host derived from Ethereum transaction data. This is conc...
OpenSSF Malicious Packages via OSV confirms @adminide-stack/forms-core@5.1.9-alpha.3 as malicious (MAL-2026-18640): Malicious code in @adminide-stack/forms-core (npm)
OpenSSF Malicious Packages via OSV confirms @adminide-stack/health-api-server@0.0.18-alpha.465 as malicious (MAL-2026-18641): Malicious code in @adminide-stack/health-api-server (npm)