npm scope
@okx_ai
LPM Firewall blocks 2 packages in the @okx_ai npm scope. 2 have LPM's own review and are listed first.
Sep 23, 2026
@okx_ai/okx-trade-mcp@1.4.8
Remote code executionThe postinstall hook fetches native binaries from a CDN and makes them executable, using a checksum served by the same host, including static.jingyunyilian.com. The published server then...
Sep 14, 2026
@okx_ai/okx-trade-cli@1.4.7
Install hook abuseThis is an automatic lifecycle remote-code delivery chain, not a transparent package-only CLI installation. The downloaded payload is not independently pinned or reviewable, and the packa...
Each card opens the package page with its evidence and every recorded version.