npm scope
@selfpentest
LPM Firewall blocks 2 packages in the @selfpentest npm scope. 1 has LPM's own review and is listed first.
Sep 27, 2026
@selfpentest/bin-confusion@1.0.1
Credential exfiltrationThe active executable performs credential and local-file collection followed by a network send. Its npm command name makes the behavior especially likely to be triggered through command c...
Sep 29, 2026
@selfpentest/eslint-pentest-plugin@1.0.0
MalwareOpenSSF Malicious Packages via OSV confirms @selfpentest/eslint-pentest-plugin@1.0.0 as malicious (MAL-2026-17293): Malicious code in @selfpentest/eslint-pentest-plugin (npm)
Each card opens the package page with its evidence and every recorded version.