npm scope
@mgor
LPM Firewall blocks 2 packages in the @mgor npm scope. 2 have LPM's own review and are listed first.
Jul 26, 2026
@mgor/fw-canary-20260725-394b024b@0.0.2
Remote code executionDespite inert-canary comments, the source contains concrete import-time remote code execution. No install hook is needed for this to be malicious.
Jul 26, 2026
@mgor/fw-canary-3333@0.0.2
Remote code executionThe package has no install hook, but its exported main file creates concrete remote code execution whenever it is imported. The source comment falsely describes the package as inert.
Each card opens the package page with its evidence and every recorded version.