npm scope
@umschool
LPM Firewall blocks 2 packages in the @umschool npm scope. 1 has LPM's own review and is listed first.
Sep 8, 2026
@umschool/analytics@999.0.4
Credential exfiltrationThis is concrete, unconsented install-time collection and exfiltration of credentials and project data. The harmless research framing does not match the implemented behavior.
Sep 9, 2026
@umschool/platform@999.0.2
MalwareOpenSSF Malicious Packages via OSV confirms @umschool/platform@999.0.2 as malicious (MAL-2026-16082): Malicious code in @umschool/platform (npm)
Each card opens the package page with its evidence and every recorded version.