npm scope
@equansservices
LPM Firewall blocks 3 packages in the @equansservices npm scope. 1 has LPM's own review and is listed first.
Jul 10, 2026
@equansservices/tool@1.0.2
Remote code executionThis is concrete malicious install-hook behavior: unconsented postinstall download and detached execution of remote unauthenticated code. The behavior is not package-aligned with a benign...
Jul 13, 2026
@equansservices/codex@1.0.1
MalwareOpenSSF Malicious Packages via OSV confirms @equansservices/codex@1.0.1 as malicious (MAL-2026-10399): Malicious code in @equansservices/codex (npm)
Jul 9, 2026
@equansservices/setup@1.0.3
MalwareOpenSSF Malicious Packages via OSV confirms @equansservices/setup@1.0.3 as malicious (MAL-2026-10094): Malicious code in @equansservices/setup (npm)
Each card opens the package page with its evidence and every recorded version.