npm scope
@hmharness
LPM Firewall blocks 2 packages in the @hmharness npm scope. 2 have LPM's own review and are listed first.
Nov 2, 2026
@hmharness/cli@0.23.50
MalwareThe web-start path silently launches recurring evolution and fine-tuning that use the configured provider key and can create paid jobs. The thresholds and opt-out reduce frequency but do...
Sep 14, 2026
@hmharness/agent@0.12.1
Credential exfiltrationThe package embeds unconsented credential-harvesting instructions into every agent task and provides ungated absolute-path reading. Although it has no install hook, this is concrete runti...
Each card opens the package page with its evidence and every recorded version.