npm scope
@esvndev
LPM Firewall blocks 2 packages in the @esvndev npm scope. 2 have LPM's own review and are listed first.
Oct 7, 2026
@esvndev/es-react-import-export@1.2.44
ProtestwareThe entrypoint automatically disrupts selected visitors’ pages after a delay, including by blocking pointer interaction and playing external audio. This is active targeted browser disrupt...
Aug 10, 2026
@esvndev/es-react-dynamic-column@1.0.29
ProtestwareThe payload is concrete, targeted, import-time disruptive behavior unrelated to a dynamic-column React component. Absence of install hooks does not remove the browser-runtime attack surface.
Each card opens the package page with its evidence and every recorded version.