npm scope

@public-for-cdao

LPM Firewall blocks 15 packages in the @public-for-cdao npm scope.

Jul 20, 2026

@public-for-cdao/backend@99.99.99

OpenSSF Malicious Packages via OSV confirms @public-for-cdao/backend@99.99.99 as malicious (MAL-2026-10882): Malicious code in @public-for-cdao/backend (npm)

Jul 20, 2026

@public-for-cdao/bot@99.99.99

Malware

OpenSSF Malicious Packages via OSV confirms @public-for-cdao/bot@99.99.99 as malicious (MAL-2026-10883): Malicious code in @public-for-cdao/bot (npm)

Jul 20, 2026

@public-for-cdao/contracts@99.99.99

Malware

OpenSSF Malicious Packages via OSV confirms @public-for-cdao/contracts@99.99.99 as malicious (MAL-2026-10884): Malicious code in @public-for-cdao/contracts (npm)

Jul 20, 2026

@public-for-cdao/core@99.99.99

Malware

OpenSSF Malicious Packages via OSV confirms @public-for-cdao/core@99.99.99 as malicious (MAL-2026-10885): Malicious code in @public-for-cdao/core (npm)

Jul 20, 2026

@public-for-cdao/deploy