npm scope
@bpa-internal
LPM Firewall blocks 4 packages in the @bpa-internal npm scope.
Sep 1, 2026
@bpa-internal/bpa-auth@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @bpa-internal/bpa-auth@99.99.99 as malicious (MAL-2026-15676): Malicious code in @bpa-internal/bpa-auth (npm)
Sep 1, 2026
@bpa-internal/bpa-common@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @bpa-internal/bpa-common@99.99.99 as malicious (MAL-2026-15677): Malicious code in @bpa-internal/bpa-common (npm)
Sep 1, 2026
@bpa-internal/bpa-types@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @bpa-internal/bpa-types@99.99.99 as malicious (MAL-2026-15678): Malicious code in @bpa-internal/bpa-types (npm)
Sep 1, 2026
@bpa-internal/bpa-utils@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @bpa-internal/bpa-utils@99.99.99 as malicious (MAL-2026-15679): Malicious code in @bpa-internal/bpa-utils (npm)
Each card opens the package page with its evidence and every recorded version.