npm scope
@khaznatech
LPM Firewall blocks 3 packages in the @khaznatech npm scope. 3 have LPM's own review and are listed first.
Aug 13, 2026
@khaznatech/utils@99.0.0
Data exfiltrationThis is concrete unconsented install-time collection and exfiltration of host/project context. The benign utility exports do not justify the lifecycle telemetry.
Aug 13, 2026
@khaznatech/common@99.0.0
Data exfiltrationThe package performs unconsented, install-time transmission of host and installation-context data to an unrelated webhook endpoint. Its normal runtime entrypoint is benign, but the lifecy...
Aug 13, 2026
@khaznatech/core@99.0.0
Data exfiltrationThe package’s preinstall hook performs a concrete, automatic outbound collection of host and installation metadata to a third-party webhook. The normal runtime entrypoint does not mitigat...
Each card opens the package page with its evidence and every recorded version.