npm scope
@or-sdk
LPM Firewall blocks 60 packages in the @or-sdk npm scope. 1 has LPM's own review and is listed first.
Aug 4, 2026
@or-sdk/flows@2.7.9
Remote code executionThe install-time execution chain is unrelated to the SDK entrypoints and contains obfuscated remote-code evaluation plus credential-targeting behavior. This is concrete malicious install-...
Aug 5, 2026
@or-sdk/card-templates@2.2.7
MalwareOpenSSF Malicious Packages via OSV confirms @or-sdk/card-templates@2.2.7 as malicious (MAL-2026-11679): Malicious code in @or-sdk/card-templates (npm)
Aug 5, 2026
@or-sdk/cards@1.2.7
MalwareOpenSSF Malicious Packages via OSV confirms @or-sdk/cards@1.2.7 as malicious (MAL-2026-11680): Malicious code in @or-sdk/cards (npm)
Aug 5, 2026
@or-sdk/ccp@10.15.6
MalwareOpenSSF Malicious Packages via OSV confirms @or-sdk/ccp@10.15.6 as malicious (MAL-2026-11681): Malicious code in @or-sdk/ccp (npm)