npm scope
@nimbusedge2
LPM Firewall blocks 3 packages in the @nimbusedge2 npm scope. 1 has LPM's own review and is listed first.
Sep 20, 2026
@nimbusedge2/auth@1.1.1
Install hook abuseThe automatic lifecycle hook contains a remote interactive-shell pattern and external data-posting command. This is malicious install-hook abuse.
Sep 21, 2026
@nimbusedge2/x@1.1.1
MalwareOpenSSF Malicious Packages via OSV confirms @nimbusedge2/x@1.1.1 as malicious (MAL-2026-16305): Malicious code in @nimbusedge2/x (npm)
Sep 21, 2026
@nimbusedge2/xa@1.1.0
MalwareOpenSSF Malicious Packages via OSV confirms @nimbusedge2/xa@1.1.0 as malicious (MAL-2026-16306): Malicious code in @nimbusedge2/xa (npm)
Each card opens the package page with its evidence and every recorded version.