npm scope

@goparrot-dashboard

LPM Firewall blocks 20 packages in the @goparrot-dashboard npm scope. 1 has LPM's own review and is listed first.

Nov 2, 2026

@goparrot-dashboard/app@0.0.2

The package automatically collects hostname, username, and working directory during installation and sends them to a hard-coded external callback. This is install-time data exfiltration,...

Nov 3, 2026

@goparrot-dashboard/analytics@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/analytics@0.0.1 as malicious (MAL-2026-18493): Malicious code in @goparrot-dashboard/analytics (npm)

Nov 3, 2026

@goparrot-dashboard/auth@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/auth@0.0.1 as malicious (MAL-2026-18494): Malicious code in @goparrot-dashboard/auth (npm)

Nov 3, 2026

@goparrot-dashboard/category@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/category@0.0.1 as malicious (MAL-2026-18495): Malicious code in @goparrot-dashboard/category (npm)

Nov 3, 2026

@goparrot-dashboard/combo-group@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/combo-group@0.0.1 as malicious (MAL-2026-18496): Malicious code in @goparrot-dashboard/combo-group (npm)

Nov 3, 2026

@goparrot-dashboard/combos@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/combos@0.0.1 as malicious (MAL-2026-18497): Malicious code in @goparrot-dashboard/combos (npm)

Nov 3, 2026

@goparrot-dashboard/franchise-directory@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/franchise-directory@0.0.1 as malicious (MAL-2026-18498): Malicious code in @goparrot-dashboard/franchise-directory (npm)

Nov 3, 2026

@goparrot-dashboard/franchise-management@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/franchise-management@0.0.1 as malicious (MAL-2026-18499): Malicious code in @goparrot-dashboard/franchise-management (npm)

Nov 3, 2026

@goparrot-dashboard/franchise-marketing@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/franchise-marketing@0.0.1 as malicious (MAL-2026-18500): Malicious code in @goparrot-dashboard/franchise-marketing (npm)

Nov 3, 2026

@goparrot-dashboard/franchise-menu-settings@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/franchise-menu-settings@0.0.1 as malicious (MAL-2026-18501): Malicious code in @goparrot-dashboard/franchise-menu-settings...

Nov 3, 2026

@goparrot-dashboard/homepages@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/homepages@0.0.1 as malicious (MAL-2026-18502): Malicious code in @goparrot-dashboard/homepages (npm)

Nov 3, 2026

@goparrot-dashboard/i18n@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/i18n@0.0.1 as malicious (MAL-2026-18503): Malicious code in @goparrot-dashboard/i18n (npm)

Nov 3, 2026

@goparrot-dashboard/loyalty@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/loyalty@0.0.1 as malicious (MAL-2026-18504): Malicious code in @goparrot-dashboard/loyalty (npm)

Nov 3, 2026

@goparrot-dashboard/marketing@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/marketing@0.0.1 as malicious (MAL-2026-18505): Malicious code in @goparrot-dashboard/marketing (npm)

Nov 3, 2026

@goparrot-dashboard/menu@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/menu@0.0.1 as malicious (MAL-2026-18506): Malicious code in @goparrot-dashboard/menu (npm)

Nov 3, 2026

@goparrot-dashboard/order@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/order@0.0.1 as malicious (MAL-2026-18507): Malicious code in @goparrot-dashboard/order (npm)

Nov 3, 2026

@goparrot-dashboard/payment@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/payment@0.0.1 as malicious (MAL-2026-18508): Malicious code in @goparrot-dashboard/payment (npm)

Nov 3, 2026

@goparrot-dashboard/promotion@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/promotion@0.0.1 as malicious (MAL-2026-18509): Malicious code in @goparrot-dashboard/promotion (npm)

Nov 3, 2026

@goparrot-dashboard/settings@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/settings@0.0.1 as malicious (MAL-2026-18510): Malicious code in @goparrot-dashboard/settings (npm)

Nov 3, 2026

@goparrot-dashboard/store@0.0.1

Malware

OpenSSF Malicious Packages via OSV confirms @goparrot-dashboard/store@0.0.1 as malicious (MAL-2026-18511): Malicious code in @goparrot-dashboard/store (npm)