npm scope
@draftlab
LPM Firewall blocks 3 packages in the @draftlab npm scope.
Jun 30, 2026
@draftlab/auth@0.24.2
MalwareOSV/OpenSSF confirms @draftlab/auth@0.24.2 as malicious package MAL-2026-3596. Malicious code in @draftlab/auth (npm)
Jun 30, 2026
@draftlab/auth-router@0.5.2
MalwareOSV/OpenSSF confirms @draftlab/auth-router@0.5.2 as malicious package MAL-2026-3597. Malicious code in @draftlab/auth-router (npm)
Jun 30, 2026
@draftlab/db@0.16.2
MalwareOSV/OpenSSF confirms @draftlab/db@0.16.2 as malicious package MAL-2026-3598. Malicious code in @draftlab/db (npm)
Each card opens the package page with its evidence and every recorded version.