@dransay
LPM Firewall blocks 7 packages in the @dransay npm scope. 7 have LPM's own review and are listed first.
The package performs an automatic installation-time network beacon to an unrelated OAST endpoint, and its comments directly assert benignness and a security-research rationale. These fact...
OpenSSF Malicious Packages via OSV confirms @dransay/feature-flags@99.0.0 as malicious (MAL-2026-17696): Malicious code in @dransay/feature-flags (npm)
The automatic preinstall beacon sends installation-identifying data to an unrelated OAST host, and the source contains reviewer-directed benignness claims. This is concrete install-time n...
OpenSSF Malicious Packages via OSV confirms @dransay/phone-fix-test@99.0.0 as malicious (MAL-2026-17698): Malicious code in @dransay/phone-fix-test (npm)
An automatic preinstall hook transmits installation telemetry to a fixed external host without a code-enforced consent gate. This is concrete outbound data collection; the README’s benign...
OpenSSF Malicious Packages via OSV confirms @dransay/address-validation@99.0.0 as malicious (MAL-2026-17668): Malicious code in @dransay/address-validation (npm)
The automatic install hook performs outbound beaconing to an external host, and the source includes a reviewer-directed claim of benignness. Together these support blocking as install-tim...