npm scope

@ornikar

LPM Firewall blocks 38 packages in the @ornikar npm scope. 29 have LPM's own review and are listed first.

Aug 4, 2026

@ornikar/babel-preset-react@6.1.13

This behavior is unrelated to a Babel preset and is activated automatically at install time. The clear launcher-to-obfuscated-payload chain establishes concrete malicious behavior.

Aug 4, 2026

@ornikar/jest-config-react-native-web@12.0.13

Credential exfiltration

Direct inspection confirms an install-time bootstrapper executing an obfuscated credential-oriented remote payload. This is concrete malicious supply-chain behavior, not a legitimate conf...

Aug 4, 2026

@ornikar/slate-react-fork@1.0.6

Credential exfiltration

The preinstall hook executes an obfuscated credential-harvesting payload unrelated to the Slate React library. Normal editor code in dist does not mitigate the install-time compromise.

Aug 4, 2026

@ornikar/react-modern-calendar-datepicker