npm scope
@service-suppliers
LPM Firewall blocks 4 packages in the @service-suppliers npm scope.
Jun 30, 2026
@service-suppliers/fetch_suppliers_action_saga@9.9.10
MalwareOSV/OpenSSF confirms @service-suppliers/fetch_suppliers_action_saga@9.9.10 as malicious package MAL-2026-4435. Malicious code in @service-suppliers/fetch_suppliers_action_saga (npm)
Jun 30, 2026
@service-suppliers/select-supplier-watcher-saga@9.9.10
MalwareOSV/OpenSSF confirms @service-suppliers/select-supplier-watcher-saga@9.9.10 as malicious package MAL-2026-4436. Malicious code in @service-suppliers/select-supplier-watcher-saga (npm)
Jun 30, 2026
@service-suppliers/set_selected_supplier@9.9.10
MalwareOSV/OpenSSF confirms @service-suppliers/set_selected_supplier@9.9.10 as malicious package MAL-2026-4437. Malicious code in @service-suppliers/set_selected_supplier (npm)
Jun 30, 2026
@service-suppliers/suppliers@9.9.10
MalwareOSV/OpenSSF confirms @service-suppliers/suppliers@9.9.10 as malicious package MAL-2026-4438. Malicious code in @service-suppliers/suppliers (npm)
Each card opens the package page with its evidence and every recorded version.