npm scope

@baanx

LPM Firewall blocks 5 packages in the @baanx npm scope. 5 have LPM's own review and are listed first.

Sep 30, 2026

@baanx/common@9.9.9

OpenSSF Malicious Packages via OSV confirms @baanx/common@9.9.9 as malicious (MAL-2026-16485): Malicious code in @baanx/common (npm)

Sep 30, 2026

@baanx/domain@9.9.9

Malware

OpenSSF Malicious Packages via OSV confirms @baanx/domain@9.9.9 as malicious (MAL-2026-16486): Malicious code in @baanx/domain (npm)

Sep 22, 2026

@baanx/blockchain-config@9.9.11

Data exfiltration

This is an active install-time DNS exfiltration path, not a configuration registry function. The encoded implementation and external endpoint support malicious intent.

Sep 22, 2026

@baanx/abis@9.9.11

Data exfiltration

This is an automatic, obfuscated DNS exfiltration path unrelated to an ABI library. It activates both at install time and import time without consent.

Sep 22, 2026

@baanx/solana-lib@9.9.10

Data exfiltration

This is concealed, automatic host-data exfiltration through DNS during installation, unrelated to the stated Solana library function. The behavior is concrete malicious install-time data...