npm scope
@demica
LPM Firewall blocks 3 packages in the @demica npm scope.
Aug 13, 2026
@demica/core@99.99.100
MalwareOpenSSF Malicious Packages via OSV confirms @demica/core@99.99.100 as malicious (MAL-2026-5349): Malicious code in @demica/core (npm)
Jul 8, 2026
@demica/resources@99.99.100
MalwareOpenSSF Malicious Packages via OSV confirms @demica/resources@99.99.100 as malicious (MAL-2026-5350): Malicious code in @demica/resources (npm)
Jul 8, 2026
@demica/shared@99.99.100
MalwareOpenSSF Malicious Packages via OSV confirms @demica/shared@99.99.100 as malicious (MAL-2026-5351): Malicious code in @demica/shared (npm)
Each card opens the package page with its evidence and every recorded version.