npm scope
@galicia-toolkit
LPM Firewall blocks 3 packages in the @galicia-toolkit npm scope. 2 have LPM's own review and are listed first.
Oct 8, 2026
@galicia-toolkit/spa-build-config@999.0.6
Credential exfiltrationThe install lifecycle automatically activates code that collects credentials and host information and transmits it to an external endpoint. This is concrete credential and data exfiltrati...
Oct 8, 2026
@galicia-toolkit/tag-manager@999.0.6
Credential exfiltrationThe postinstall hook performs active, automatic credential and host data exfiltration to a package-unrelated fixed endpoint over HTTP and DNS. This is concrete malicious install-time beha...
Oct 8, 2026
@galicia-toolkit/error-master@999.0.3
MalwareOpenSSF Malicious Packages via OSV confirms @galicia-toolkit/error-master@999.0.3 as malicious (MAL-2026-17689): Malicious code in @galicia-toolkit/error-master (npm)
Each card opens the package page with its evidence and every recorded version.