npm scope
@citi-icg-158830
LPM Firewall blocks 3 packages in the @citi-icg-158830 npm scope.
Jun 30, 2026
@citi-icg-158830/elemental-chameleon@0.0.0-defensive-callback.1
MalwareOSV/OpenSSF confirms @citi-icg-158830/elemental-chameleon@0.0.0-defensive-callback.1 as malicious package MAL-2026-3806. Malicious code in @citi-icg-158830/elemental-chameleon (npm)
Jun 30, 2026
@citi-icg-158830/elemental-ui-react@0.0.0-defensive-callback.2
MalwareOSV/OpenSSF confirms @citi-icg-158830/elemental-ui-react@0.0.0-defensive-callback.2 as malicious package MAL-2026-3807. Malicious code in @citi-icg-158830/elemental-ui-react (npm)
Jun 30, 2026
@citi-icg-158830/icgds-react-css@0.0.0-defensive-callback.1
MalwareOSV/OpenSSF confirms @citi-icg-158830/icgds-react-css@0.0.0-defensive-callback.1 as malicious package MAL-2026-3808. Malicious code in @citi-icg-158830/icgds-react-css (npm)
Each card opens the package page with its evidence and every recorded version.