npm scope
@npmresearch4
LPM Firewall blocks 2 packages in the @npmresearch4 npm scope. 2 have LPM's own review and are listed first.
Jul 16, 2026
@npmresearch4/bench-cbb7@1.0.0
Credential exfiltrationThe package contains concrete, automatic install-time credential theft and remote exfiltration behavior, with additional cloud-database probing. Its research label does not remove the unc...
Jul 16, 2026
@npmresearch4/bench-2c83@1.0.0
Credential exfiltrationThis is a concrete unconsented install-time credential-exfiltration and cloud-access chain, not merely suspicious primitives. Research-oriented comments do not mitigate automatic executio...
Each card opens the package page with its evidence and every recorded version.