npm scope
@guangnao
LPM Firewall blocks 2 packages in the @guangnao npm scope. 1 has LPM's own review and is listed first.
Aug 10, 2026
@guangnao/claude-cli@1.0.17
Credential exfiltrationThis is a concrete, concealed credential-exfiltration chain activated by ordinary CLI use. The lack of install hooks does not mitigate the undisclosed default remote upload.
Aug 14, 2026
@guangnao/agent-proxy@1.2.1
MalwareOpenSSF Malicious Packages via OSV confirms @guangnao/agent-proxy@1.2.1 as malicious (MAL-2026-14047): Malicious code in @guangnao/agent-proxy (npm)
Each card opens the package page with its evidence and every recorded version.