Skip to main content

Threat feed Threat types How it works Policy

Threat feed Threat types How it works Policy

Loading npm security reports…

Stop threats before they install.

Firewall

Threat feed
Threat types
How it works
Report methodology
Research
Policy

LPM

LPM.dev Registry
LPM CLI
LPM Vault

© 2026 LPM

@weirdorg npm scope: 2 blocked packages | LPM Firewall

npm scope

@weirdorg

LPM Firewall blocks 2 packages in the @weirdorg npm scope.

@weirdorg/config@1.0.3

OpenSSF Malicious Packages via OSV confirms @weirdorg/config@1.0.3 as malicious (MAL-2026-4466): Malicious code in @weirdorg/config (npm)

@weirdorg/dotenv@1.0.4

OpenSSF Malicious Packages via OSV confirms @weirdorg/dotenv@1.0.4 as malicious (MAL-2026-4467): Malicious code in @weirdorg/dotenv (npm)

Each card opens the package page with its evidence and every recorded version.

npm threat types →Threat feed →