npm scope
@securihackbot
LPM Firewall blocks 2 packages in the @securihackbot npm scope. 2 have LPM's own review and are listed first.
Oct 20, 2026
@securihackbot/depconf-stage-1792484738@1.0.0
Data exfiltrationThe automatic install-time disclosure of host and user identifiers to a publisher-selected callback is concrete installation beaconing. The inspected source shows no affirmative installer...
Oct 20, 2026
@securihackbot/depconf-flow-1792484611@1.2.1
Data exfiltrationThe manifest activates the hook during installation, and the source shows identifying environment data sent to an external package-selected endpoint by default. This is automatic installa...
Each card opens the package page with its evidence and every recorded version.