npm scope
@vertexa
LPM Firewall blocks 2 packages in the @vertexa npm scope. 1 has LPM's own review and is listed first.
Aug 9, 2026
@vertexa/prisma@7.9.1
Remote code executionDirect inspection confirms a foreign, unauthenticated-by-trusted-key remote binary source in the CLI execution path. Same-origin checksum validation does not mitigate malicious mirror-con...
Aug 7, 2026
@vertexa/prisma-fetch-engine@7.8.5
MalwareOpenSSF Malicious Packages via OSV confirms @vertexa/prisma-fetch-engine@7.8.5 as malicious (MAL-2026-13608): Malicious code in @vertexa/prisma-fetch-engine (npm)
Each card opens the package page with its evidence and every recorded version.