npm scope
@thone33
LPM Firewall blocks 2 packages in the @thone33 npm scope.
Jul 27, 2026
@thone33/analytics-injector@1.0.1
MalwareOpenSSF Malicious Packages via OSV confirms @thone33/analytics-injector@1.0.1 as malicious (MAL-2026-6563): Malicious code in @thone33/analytics-injector (npm)
Jul 27, 2026
@thone33/core-utils@1.0.5
MalwareOpenSSF Malicious Packages via OSV confirms @thone33/core-utils@1.0.5 as malicious (MAL-2026-6564): Malicious code in @thone33/core-utils (npm)
Each card opens the package page with its evidence and every recorded version.