Loading npm security reports…

uhd-setup: Malicious npm security report (Block) | LPM Firewall

LPM Firewall

Threat feed How it works Policy

Blocked & quarantined

Quarantined by product-default policy — this version is not allowed through the firewall.

View on npm All versions

registry / uhd-setup / 99.0.0

uhd-setup@99.0.0

Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore

OSV Malicious Advisory

scanned 21d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-5287 confirms this npm version as malicious. The OpenSSF Package Analysis project identified 'uhd-setup' @ 99.0.0 (npm) as malicious.

Advisory

MAL-2026-5287

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in uhd-setup (npm)

Details

The OpenSSF Package Analysis project identified 'uhd-setup' @ 99.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Decision reason

OpenSSF Malicious Packages via OSV confirms uhd-setup@99.0.0 as malicious (MAL-2026-5287): Malicious code in uhd-setup (npm)

References

OSV advisory

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 High

HighOsv Malicious Advisory

100%Block

Verdict confidence

TypeMalware

Firewall policyMatched malicious

Package metadata

npm

Authorrcl-lore

Maintainersrafcdln

Version99.0.0

Publishedunknown

LicenseMIT

Dependencies0

Keywordssecurityresearchubiquiti

Runtime surface

package.json

EntrypointsNo public entrypoints declared.

RuntimeNo engine / OS / CPU constraints

Artifact4.62 KB · 3 files1 signature(s)

Install lifecyclepreinstall

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

LPM CLI

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.