Loading npm security reports…

uisp-connector: Malicious npm security report (Block) | LPM Firewall

LPM Firewall

Threat feed How it works Policy

Blocked & quarantined

Quarantined by product-default policy — this version is not allowed through the firewall.

View on npm All versions

registry / uisp-connector / 99.0.0

uisp-connector@99.0.0

Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore

OSV Malicious Advisory

scanned 21d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-5288 confirms this npm version as malicious. The OpenSSF Package Analysis project identified 'uisp-connector' @ 99.0.0 (npm) as malicious.

Advisory

MAL-2026-5288

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in uisp-connector (npm)

Details

The OpenSSF Package Analysis project identified 'uisp-connector' @ 99.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Decision reason

OpenSSF Malicious Packages via OSV confirms uisp-connector@99.0.0 as malicious (MAL-2026-5288): Malicious code in uisp-connector (npm)

References

OSV advisory

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 High

HighOsv Malicious Advisory

100%

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Block

Verdict confidence

TypeMalware

Firewall policyMatched malicious

Package metadata

npm

Authorrcl-lore

Maintainersrafcdln

Version99.0.0

Publishedunknown

LicenseMIT

Dependencies0

Keywordssecurityresearchubiquiti

Runtime surface

package.json

EntrypointsNo public entrypoints declared.

RuntimeNo engine / OS / CPU constraints

Artifact4.63 KB · 3 files1 signature(s)

Install lifecyclepreinstall

LPM CLI

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.