npm scope
@bobfrankston
LPM Firewall blocks 2 packages in the @bobfrankston npm scope. 2 have LPM's own review and are listed first.
Oct 2, 2026
@bobfrankston/rmfmail@1.2.354
Credential exfiltrationInspected source establishes automatic forwarding of existing mail passwords to a hardcoded unrelated logging receiver through the active shipped bootstrap. This concrete credential expos...
Oct 2, 2026
@bobfrankston/mailx-store-web@0.1.128
Credential exfiltrationInspected source establishes an active, default credential export during Android initialization, independent of the scanner's similarity claims. The hardcoded remote logging sink receives...
Each card opens the package page with its evidence and every recorded version.