npm scope
@spinstorm
LPM Firewall blocks 3 packages in the @spinstorm npm scope.
Jul 9, 2026
@spinstorm/derng@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @spinstorm/derng@99.99.99 as malicious (MAL-2026-7090): Malicious code in @spinstorm/derng (npm)
Jul 9, 2026
@spinstorm/eslint-config@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @spinstorm/eslint-config@99.99.99 as malicious (MAL-2026-7091): Malicious code in @spinstorm/eslint-config (npm)
Jul 9, 2026
@spinstorm/typescript-config@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @spinstorm/typescript-config@99.99.99 as malicious (MAL-2026-7092): Malicious code in @spinstorm/typescript-config (npm)
Each card opens the package page with its evidence and every recorded version.