@vbansal67
LPM Firewall blocks 14 packages in the @vbansal67 npm scope. 14 have LPM's own review and are listed first.
The package deliberately forwards NPM bearer credentials and selected package data to an unrelated Worker during its advertised publishing flow. Although user-invoked and without install...
The opaque third-party proxy receives an npm credential and uploaded files, creating a concrete credential and data exfiltration path. The absence of install hooks does not remove this us...
The source implements concrete credential and package-data transmission to an unrelated endpoint. User interaction is required, but it does not make forwarding an npm bearer token and arc...
This is a concrete credential and data-exfiltration path through an undisclosed third-party proxy. It is user-triggered rather than install-time, but the token-routing behavior warrants b...