npm scope

@siriusbeyond

LPM Firewall blocks 3 packages in the @siriusbeyond npm scope. 3 have LPM's own review and are listed first.

Sep 22, 2026

@siriusbeyond/utils@99.0.0

The package implements an automatic install-time reconnaissance and external callback chain. Its research labels do not establish consent for this behavior.

Sep 22, 2026

@siriusbeyond/auth@99.0.0

Data exfiltration

The package performs automatic install-time host and environment reconnaissance followed by external transmission. Its research labeling does not establish consent for this behavior.

Sep 22, 2026

@siriusbeyond/ui@99.0.0

Data exfiltration

The automatic lifecycle hooks activate host and environment reconnaissance and transmit the results to an unrelated external Telegram recipient. The behavior is concrete install-time data...