Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

Stop threats before they install.

Firewall

Threat feed
Threat types
How it works
Report methodology
Research
Policy

LPM

LPM.dev Registry
LPM CLI
LPM Vault

© 2026 LPM

@combinezone npm scope: 2 blocked packages | LPM Firewall

npm scope

@combinezone

LPM Firewall blocks 2 packages in the @combinezone npm scope.

@combinezone/core@99.9.9

OpenSSF Malicious Packages via OSV confirms @combinezone/core@99.9.9 as malicious (MAL-2026-7061): Malicious code in @combinezone/core (npm)

@combinezone/theme@99.9.9

OpenSSF Malicious Packages via OSV confirms @combinezone/theme@99.9.9 as malicious (MAL-2026-7062): Malicious code in @combinezone/theme (npm)

Each card opens the package page with its evidence and every recorded version.

npm threat types →Threat feed →