npm scope
@testrelic
LPM Firewall blocks 2 packages in the @testrelic npm scope. 1 has LPM's own review and is listed first.
Aug 27, 2026
@testrelic/playwright-analytics@2.13.0
Install hook abuseThis is an automatic install-time hidden-code execution chain, not normal reporter functionality. Block publication to prevent arbitrary concealed code from running during installation.
Aug 31, 2026
@testrelic/appium-analytics@1.1.1-next.88
MalwareOpenSSF Malicious Packages via OSV confirms @testrelic/appium-analytics@1.1.1-next.88 as malicious (MAL-2026-15647): Malicious code in @testrelic/appium-analytics (npm)
Each card opens the package page with its evidence and every recorded version.