npm scope
@syncraft-labs
LPM Firewall blocks 3 packages in the @syncraft-labs npm scope. 3 have LPM's own review and are listed first.
Aug 24, 2026
@syncraft-labs/react@0.4.1
Remote code executionDirect inspection confirms a concealed staged-payload loader with eval and detached process execution in the ESM runtime path. Absence of lifecycle hooks does not mitigate this applicatio...
Aug 24, 2026
@syncraft-labs/vue@0.4.1
Remote code executionThe package contains a concrete, obfuscated import-time remote payload execution chain. Lack of npm lifecycle hooks does not mitigate the ESM import path.
Aug 23, 2026
@syncraft-labs/core@0.4.1
Remote code executionThe ESM runtime entry contains a concrete concealed payload-execution chain, not merely suspicious primitives. Lack of lifecycle hooks does not mitigate import-time arbitrary execution.
Each card opens the package page with its evidence and every recorded version.