npm scope
@drone-js-ext
LPM Firewall blocks 2 packages in the @drone-js-ext npm scope. 2 have LPM's own review and are listed first.
Oct 29, 2026
@drone-js-ext/vip-badge@0.0.0-stage
MalwareOpenSSF Malicious Packages via OSV confirms @drone-js-ext/vip-badge@0.0.0-stage as malicious (MAL-2026-18277): Malicious code in @drone-js-ext/vip-badge (npm)
Oct 29, 2026
@drone-js-ext/core@0.0.0-stage
MalwareOpenSSF Malicious Packages via OSV confirms @drone-js-ext/core@0.0.0-stage as malicious (MAL-2026-18276): Malicious code in @drone-js-ext/core (npm)
Each card opens the package page with its evidence and every recorded version.