Skip to main content

Threat feed Threat types How it works Policy

Threat feed Threat types How it works Policy

Loading npm security reports…

Stop threats before they install.

Firewall

Threat feed
Threat types
How it works
Report methodology
Research
Policy

LPM

LPM.dev Registry
LPM CLI
LPM Vault

© 2026 LPM

@draftauth npm scope: 2 blocked packages | LPM Firewall

npm scope

@draftauth

LPM Firewall blocks 2 packages in the @draftauth npm scope.

@draftauth/client@0.2.2

OSV/OpenSSF confirms @draftauth/client@0.2.2 as malicious package MAL-2026-3594. Malicious code in @draftauth/client (npm)

@draftauth/core@0.13.2

OSV/OpenSSF confirms @draftauth/core@0.13.2 as malicious package MAL-2026-3595. Malicious code in @draftauth/core (npm)

Each card opens the package page with its evidence and every recorded version.

npm threat types →Threat feed →