npm scope
@su-doughnym
LPM Firewall blocks 3 packages in the @su-doughnym npm scope.
Jul 8, 2026
@su-doughnym/hubspot-loginui-poc@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @su-doughnym/hubspot-loginui-poc@99.99.99 as malicious (MAL-2026-6407): Malicious code in @su-doughnym/hubspot-loginui-poc (npm)
Jul 8, 2026
@su-doughnym/loginui@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @su-doughnym/loginui@99.99.99 as malicious (MAL-2026-6408): Malicious code in @su-doughnym/loginui (npm)
Jul 8, 2026
@su-doughnym/react-dlb@99.99.99
MalwareOpenSSF Malicious Packages via OSV confirms @su-doughnym/react-dlb@99.99.99 as malicious (MAL-2026-6410): Malicious code in @su-doughnym/react-dlb (npm)
Each card opens the package page with its evidence and every recorded version.