npm scope
@sqlite-prime
LPM Firewall blocks 2 packages in the @sqlite-prime npm scope. 2 have LPM's own review and are listed first.
Aug 11, 2026
@sqlite-prime/nodesql@1.0.4
MalwareOpenSSF Malicious Packages via OSV confirms @sqlite-prime/nodesql@1.0.4 as malicious (MAL-2026-13716): Malicious code in @sqlite-prime/nodesql (npm)
Aug 10, 2026
@sqlite-prime/createsql@1.0.1
Remote code executionThe main entrypoint performs unconditional remote payload retrieval and dynamic execution. This is a concrete remote-code-execution chain, not a benign network use.
Each card opens the package page with its evidence and every recorded version.