npm scope
@flexmr
LPM Firewall blocks 4 packages in the @flexmr npm scope. 3 have LPM's own review and are listed first.
Oct 16, 2026
@flexmr/utils@10.0.12
MalwareOpenSSF Malicious Packages via OSV confirms @flexmr/utils@10.0.12 as malicious (MAL-2026-17888): Malicious code in @flexmr/utils (npm)
Oct 16, 2026
@flexmr/survey-conversation@10.0.12
MalwareOpenSSF Malicious Packages via OSV confirms @flexmr/survey-conversation@10.0.12 as malicious (MAL-2026-17899): Malicious code in @flexmr/survey-conversation (npm)
Oct 16, 2026
@flexmr/survey-client@10.0.12
MalwareOpenSSF Malicious Packages via OSV confirms @flexmr/survey-client@10.0.12 as malicious (MAL-2026-17898): Malicious code in @flexmr/survey-client (npm)
Oct 15, 2026
@flexmr/ui@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @flexmr/ui@99.99.99 as malicious (MAL-2026-17879): Malicious code in @flexmr/ui (npm)
Each card opens the package page with its evidence and every recorded version.