npm scope
@ccfly
LPM Firewall blocks 4 packages in the @ccfly npm scope.
Aug 6, 2026
@ccfly/setup-darwin-arm64@0.1.14
MalwareOpenSSF Malicious Packages via OSV confirms @ccfly/setup-darwin-arm64@0.1.14 as malicious (MAL-2026-12084): Malicious code in @ccfly/setup-darwin-arm64 (npm)
Aug 6, 2026
@ccfly/setup-darwin-x64@0.1.16
MalwareOpenSSF Malicious Packages via OSV confirms @ccfly/setup-darwin-x64@0.1.16 as malicious (MAL-2026-12313): Malicious code in @ccfly/setup-darwin-x64 (npm)
Aug 6, 2026
@ccfly/setup-linux-arm64@0.1.0
MalwareOpenSSF Malicious Packages via OSV confirms @ccfly/setup-linux-arm64@0.1.0 as malicious (MAL-2026-13417): Malicious code in @ccfly/setup-linux-arm64 (npm)
Aug 6, 2026
@ccfly/setup-linux-x64@0.1.19
MalwareOpenSSF Malicious Packages via OSV confirms @ccfly/setup-linux-x64@0.1.19 as malicious (MAL-2026-13418): Malicious code in @ccfly/setup-linux-x64 (npm)
Each card opens the package page with its evidence and every recorded version.