npm scope

@evial

LPM Firewall blocks 2 packages in the @evial npm scope. 2 have LPM's own review and are listed first.

Aug 16, 2026

@evial/runtime-health@1.0.1

This is a concrete, unconsented install-time credential-harvesting and internal-reconnaissance chain, not package-aligned runtime health behavior.

Aug 16, 2026

@evial/runtime-utils@1.0.1

Credential exfiltration

The install hook performs broad, unconsented environment harvesting and writes potentially secret data outside its package directory. Lack of observed network egress does not make the cre...