npm scope
@emcd-vue
LPM Firewall blocks 3 packages in the @emcd-vue npm scope. 3 have LPM's own review and are listed first.
Jul 3, 2026
@emcd-vue/loans@7.2.0
Credential exfiltrationSource inspection confirms an install-time obfuscated script that transmits the full environment, creating a concrete credential-exfiltration risk. The behavior is not package-aligned tel...
Jul 3, 2026
@emcd-vue/b2b-pay-form@5.8.0
Credential exfiltrationSource inspection confirms automatic install-time collection and outbound transmission of process.env, which can contain credentials and is not necessary for a dotenv-style package. The p...
Jul 3, 2026
@emcd-vue/auth@7.1.0
Credential exfiltrationDirect source inspection shows concrete install-time credential/environment collection and obfuscated outbound telemetry behavior. Because it runs automatically during npm install and col...
Each card opens the package page with its evidence and every recorded version.