npm scope
@ks-cqc
LPM Firewall blocks 2 packages in the @ks-cqc npm scope. 1 has LPM's own review and is listed first.
Aug 11, 2026
@ks-cqc/fingerprint-generator@1.99.99
Data exfiltrationThe source implements concrete, unconsented install-time host-data exfiltration to external endpoints. The stated research purpose does not remove the active collection and transmission b...
Sep 24, 2026
@ks-cqc/h5-sig4@2.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @ks-cqc/h5-sig4@2.99.99 as malicious (MAL-2026-16524): Malicious code in @ks-cqc/h5-sig4 (npm)
Each card opens the package page with its evidence and every recorded version.