npm scope
@worrisome
LPM Firewall blocks 2 packages in the @worrisome npm scope. 2 have LPM's own review and are listed first.
Sep 8, 2026
@worrisome/aaaa@1.0.0
MalwareThe concealed remote redirect chain is concrete harmful behavior, even though it is not triggered during npm installation. The package should be blocked as a browser-delivered malicious p...
Aug 14, 2026
@worrisome/reutil@1.0.2
MalwareThis package contains no legitimate library implementation; its sole runtime artifact is an obfuscated, server-controlled redirect flow concealed behind a verification prompt.
Each card opens the package page with its evidence and every recorded version.