npm scope
@mikudeveloper
LPM Firewall blocks 2 packages in the @mikudeveloper npm scope. 1 has LPM's own review and is listed first.
Sep 18, 2026
@mikudeveloper/baileys@1.0.0
MalwareThe default socket path includes a hidden delayed fetch of a maintainer-controlled channel list and an automatic follow loop against the user's WhatsApp session. That is unconsented accou...
Sep 30, 2026
@mikudeveloper/grace@2.0.1
MalwareOpenSSF Malicious Packages via OSV confirms @mikudeveloper/grace@2.0.1 as malicious (MAL-2026-17367): Malicious code in @mikudeveloper/grace (npm)
Each card opens the package page with its evidence and every recorded version.