npm scope
@ohos-ports
LPM Firewall blocks 2 packages in the @ohos-ports npm scope. 1 has LPM's own review and is listed first.
Sep 5, 2026
@ohos-ports/tencentcloud-tmeet@1.0.16-beta.0
Destructive actionThe package performs a concrete destructive credential action automatically at install time. The native binary is opaque, and no installation need justifies clearing an existing user's au...
Aug 5, 2026
@ohos-ports/codex@0.140.0-beta.0
MalwareOpenSSF Malicious Packages via OSV confirms @ohos-ports/codex@0.140.0-beta.0 as malicious (MAL-2026-13210): Malicious code in @ohos-ports/codex (npm)
Each card opens the package page with its evidence and every recorded version.