npm scope
@dervix
LPM Firewall blocks 3 packages in the @dervix npm scope.
Jul 14, 2026
@dervix/engine.io@6.6.9
MalwareOpenSSF Malicious Packages via OSV confirms @dervix/engine.io@6.6.9 as malicious (MAL-2026-10474): Malicious code in @dervix/engine.io (npm)
Jul 14, 2026
@dervix/socket.io@4.8.9
MalwareOpenSSF Malicious Packages via OSV confirms @dervix/socket.io@4.8.9 as malicious (MAL-2026-10475): Malicious code in @dervix/socket.io (npm)
Jul 14, 2026
@dervix/ws@8.21.5
MalwareOpenSSF Malicious Packages via OSV confirms @dervix/ws@8.21.5 as malicious (MAL-2026-6496): Malicious code in @dervix/ws (npm)
Each card opens the package page with its evidence and every recorded version.