npm scope
@gleamkit
LPM Firewall blocks 4 packages in the @gleamkit npm scope.
Jul 14, 2026
@gleamkit/engine.io@6.6.5
MalwareOpenSSF Malicious Packages via OSV confirms @gleamkit/engine.io@6.6.5 as malicious (MAL-2026-10476): Malicious code in @gleamkit/engine.io (npm)
Jul 14, 2026
@gleamkit/socket.io@4.8.8
MalwareOpenSSF Malicious Packages via OSV confirms @gleamkit/socket.io@4.8.8 as malicious (MAL-2026-10477): Malicious code in @gleamkit/socket.io (npm)
Jul 13, 2026
@gleamkit/ws@8.21.3
MalwareOpenSSF Malicious Packages via OSV confirms @gleamkit/ws@8.21.3 as malicious (MAL-2026-10402): Malicious code in @gleamkit/ws (npm)
Jun 30, 2026
@gleamkit/probe@0.0.1
MalwareOpenSSF Malicious Packages via OSV confirms @gleamkit/probe@0.0.1 as malicious (MAL-2026-6306): Malicious code in @gleamkit/probe (npm)
Each card opens the package page with its evidence and every recorded version.