npm scope

@zahlen

LPM Firewall blocks 3 packages in the @zahlen npm scope.

Aug 6, 2026

@zahlen/checkout@0.2.2

OpenSSF Malicious Packages via OSV confirms @zahlen/checkout@0.2.2 as malicious (MAL-2026-13391): Malicious code in @zahlen/checkout (npm)

Aug 5, 2026

@zahlen/checkout-angular@0.1.4

Malware

OpenSSF Malicious Packages via OSV confirms @zahlen/checkout-angular@0.1.4 as malicious (MAL-2026-12332): Malicious code in @zahlen/checkout-angular (npm)

Aug 5, 2026

@zahlen/checkout-react@0.1.1

Malware

OpenSSF Malicious Packages via OSV confirms @zahlen/checkout-react@0.1.1 as malicious (MAL-2026-12333): Malicious code in @zahlen/checkout-react (npm)