npm scope

@test1230504

LPM Firewall blocks 2 packages in the @test1230504 npm scope. 2 have LPM's own review and are listed first.

Jul 28, 2026

@test1230504/string-format-helper@1.0.0

Concrete install-time host/user metadata exfiltration is present in source and is unrelated to the package's advertised utility. This warrants blocking publication.

Jul 28, 2026

@test1230504/probe-7f3k2m-utils@1.0.0

Data exfiltration

Direct source inspection confirms an install-time shell command that collects and exfiltrates host/user identifiers to a third party. The runtime utility entrypoint does not justify this...