npm scope
@dreamguyxeon
LPM Firewall blocks 2 packages in the @dreamguyxeon npm scope. 2 have LPM's own review and are listed first.
Sep 21, 2026
@dreamguyxeon/libsignal-node@1.0.3
MalwareThe package contains a concrete import-time backdoor that mutates a third-party dependency and remotely directs authenticated account actions. The absence of an npm lifecycle hook does no...
Aug 14, 2026
@dreamguyxeon/baileyx@4.0.0
MalwareOpenSSF Malicious Packages via OSV confirms @dreamguyxeon/baileyx@4.0.0 as malicious (MAL-2026-13930): Malicious code in @dreamguyxeon/baileyx (npm)
Each card opens the package page with its evidence and every recorded version.