Skip to main content

Threat feed Threat types How it works Policy

Threat feed Threat types How it works Policy

Loading npm security reports…

Stop threats before they install.

Firewall

Threat feed
Threat types
How it works
Report methodology
Research
Policy

LPM

LPM.dev Registry
LPM CLI
LPM Vault

© 2026 LPM

@merceas npm scope: 2 blocked packages | LPM Firewall

npm scope

@merceas

LPM Firewall blocks 2 packages in the @merceas npm scope.

@merceas/anchor@0.32.3

OSV/OpenSSF confirms @merceas/anchor@0.32.3 as malicious package MAL-2026-6509. Malicious code in @merceas/anchor (npm)

@merceas/cross-fetch@3.1.12

OSV/OpenSSF confirms @merceas/cross-fetch@3.1.12 as malicious package MAL-2026-6510. Malicious code in @merceas/cross-fetch (npm)

Each card opens the package page with its evidence and every recorded version.

npm threat types →Threat feed →