npm scope
@liquid-web
LPM Firewall blocks 3 packages in the @liquid-web npm scope.
Jul 5, 2026
@liquid-web/app-services@1.2.9213
MalwareOpenSSF Malicious Packages via OSV confirms @liquid-web/app-services@1.2.9213 as malicious (MAL-2025-47032): Malicious code in @liquid-web/app-services (npm)
Jul 5, 2026
@liquid-web/common@1.2.9213
MalwareOpenSSF Malicious Packages via OSV confirms @liquid-web/common@1.2.9213 as malicious (MAL-2025-47033): Malicious code in @liquid-web/common (npm)
Jul 5, 2026
@liquid-web/utils@1.2.9213
MalwareOpenSSF Malicious Packages via OSV confirms @liquid-web/utils@1.2.9213 as malicious (MAL-2025-47040): Malicious code in @liquid-web/utils (npm)
Each card opens the package page with its evidence and every recorded version.