npm scope
@rivianlabs
LPM Firewall blocks 4 packages in the @rivianlabs npm scope.
Jun 30, 2026
@rivianlabs/bedrock@0.0.2
MalwareOSV/OpenSSF confirms @rivianlabs/bedrock@0.0.2 as malicious package MAL-2026-3348. Malicious code in @rivianlabs/bedrock (npm)
Jun 30, 2026
@rivianlabs/dc-fe-app-web-rivian-com@0.0.1
MalwareOSV/OpenSSF confirms @rivianlabs/dc-fe-app-web-rivian-com@0.0.1 as malicious package MAL-2026-3349. Malicious code in @rivianlabs/dc-fe-app-web-rivian-com (npm)
Jun 30, 2026
@rivianlabs/dt-lib-lumberjack@0.0.1
MalwareOSV/OpenSSF confirms @rivianlabs/dt-lib-lumberjack@0.0.1 as malicious package MAL-2026-3350. Malicious code in @rivianlabs/dt-lib-lumberjack (npm)
Jun 30, 2026
@rivianlabs/dt-shop-bag-v0@0.0.2
MalwareOSV/OpenSSF confirms @rivianlabs/dt-shop-bag-v0@0.0.2 as malicious package MAL-2026-3351. Malicious code in @rivianlabs/dt-shop-bag-v0 (npm)
Each card opens the package page with its evidence and every recorded version.