@medisend
LPM Firewall blocks 4 packages in the @medisend npm scope. 4 have LPM's own review and are listed first.
Direct source inspection found a concrete unsolicited postinstall network callback that fingerprints the installing host. This is malicious install-time data exfiltration, not a package-a...
The sole package file defines an automatic install-time callback that collects and transmits local environment and directory information to an unrelated webhook endpoint. This is concrete...
Direct manifest inspection confirms an unconsented install-time external callback carrying host identity. The stated research purpose does not remove the package's concrete attack behavior.
The only package file defines an automatic install-time external callback that fingerprints the installing host. This is concrete unconsented data exfiltration.