npm scope
@bcryptln
LPM Firewall blocks 2 packages in the @bcryptln npm scope. 1 has LPM's own review and is listed first.
Jul 10, 2026
@bcryptln/bcryptjs@3.0.3
Remote code executionThe appended obfuscated payload executes automatically on import and deliberately exposes Node runtime capabilities to concealed code. This is a concrete unauthorized execution chain, des...
Jul 10, 2026
@bcryptln/becryptjs@3.0.11
MalwareOpenSSF Malicious Packages via OSV confirms @bcryptln/becryptjs@3.0.11 as malicious (MAL-2026-10162): Malicious code in @bcryptln/becryptjs (npm)
Each card opens the package page with its evidence and every recorded version.