npm scope
@mutmutco
LPM Firewall blocks 3 packages in the @mutmutco npm scope. 3 have LPM's own review and are listed first.
Oct 18, 2026
@mutmutco/codex-plugin@4.5.133
Credential exfiltrationThe CLI forwards a locally available GitHub credential to the package-selected MMI Hub during ordinary Hub authentication without recipient-specific consent. This is concrete credential e...
Oct 17, 2026
@mutmutco/cli@4.5.177
Credential exfiltrationThe runtime forwards a saved GitHub credential to a package-selected Hub endpoint during ordinary CLI authentication without recipient-specific consent. This is concrete credential disclo...
Oct 15, 2026
@mutmutco/claude-plugin@4.5.157
Credential exfiltrationThe source verifies automatic disclosure of an existing GitHub credential to the publisher-selected default endpoint during ordinary Hub authentication. This supports blocking the package...
Each card opens the package page with its evidence and every recorded version.