npm scope
@nimbusedge
LPM Firewall blocks 2 packages in the @nimbusedge npm scope. 2 have LPM's own review and are listed first.
Sep 11, 2026
@nimbusedge/auth@19999.1359.5
Install hook abuseThe only package source defines an automatic preinstall hook that establishes a remote interactive shell and performs external data posting. This is concrete install-time malware behavior.
Sep 11, 2026
@nimbusedge/analytics@11111.1.0
Credential exfiltrationThe package performs unconsented install-time host reconnaissance and external transmission. Its canary description does not remove the concrete data-exfiltration behavior.
Each card opens the package page with its evidence and every recorded version.