Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

Stop threats before they install.

Firewall

Threat feed
Threat types
How it works
Report methodology
Research
Policy

LPM

LPM.dev Registry
LPM CLI
LPM Vault

© 2026 LPM

@kl-dolphin npm scope: 2 blocked packages | LPM Firewall

npm scope

@kl-dolphin

LPM Firewall blocks 2 packages in the @kl-dolphin npm scope.

@kl-dolphin/jump@2.0.0

OpenSSF Malicious Packages via OSV confirms @kl-dolphin/jump@2.0.0 as malicious (MAL-2026-6403): Malicious code in @kl-dolphin/jump (npm)

@kl-dolphin/swim@2.0.0

OSV/OpenSSF confirms @kl-dolphin/swim@2.0.0 as malicious package MAL-2026-6402. Malicious code in @kl-dolphin/swim (npm)

Each card opens the package page with its evidence and every recorded version.

npm threat types →Threat feed →