npm scope
@traktis
LPM Firewall blocks 2 packages in the @traktis npm scope. 2 have LPM's own review and are listed first.
Sep 16, 2026
@traktis/environment@99.99.2
Credential exfiltrationThis package has no functional code but uses two unconsented automatic lifecycle hooks to exfiltrate host and CI information. The behavior is concrete install-time data collection and war...
Sep 16, 2026
@traktis/core@99.99.2
Data exfiltrationThis package has no functional implementation but automatically exfiltrates host and CI-related metadata at install time. The behavior is concrete, unconsented, and unrelated to a legitim...
Each card opens the package page with its evidence and every recorded version.