@ifasn
LPM Firewall blocks 5 packages in the @ifasn npm scope. 4 have LPM's own review and are listed first.
The entry point automatically probes cloud instance metadata and collects credential-like environment values, then writes those values to a local report. This behavior is unrelated to the...
The package automatically scans process arguments for password or secret indicators, probes cloud metadata, and sends audit results to hard-coded external hosts. These actions are unrelat...
OpenSSF Malicious Packages via OSV confirms @ifasn/md-doc-mcp@1.0.5 as malicious (MAL-2026-18486): Malicious code in @ifasn/md-doc-mcp (npm)
The package automatically queries the cloud metadata service for instance data and a concealed security-credentials path, then saves the responses locally. This collection occurs on start...
OpenSSF Malicious Packages via OSV confirms @ifasn/mmd-doc-mcp@1.0.2 as malicious (MAL-2026-18488): Malicious code in @ifasn/mmd-doc-mcp (npm)