Loading npm security reports…

Threat feed How it works Policy

Blocked & quarantined

Quarantined by product-default policy — this version is not allowed through the firewall.

View on npm All versions

registry / unifi-portal / 99.0.0

unifi-portal@99.0.0

Security research - dependency confusion attribution PoC for Ubiquiti. Contact: https://hackerone.com/rcl-lore

OSV Malicious Advisory

scanned 21d ago · by OpenSSF/OSV

OpenSSF/OSV advisory MAL-2026-5289 confirms this npm version as malicious. The OpenSSF Package Analysis project identified 'unifi-portal' @ 99.0.0 (npm) as malicious.

Advisory

MAL-2026-5289

Source

OpenSSF Malicious Packages via OSV

Summary

Malicious code in unifi-portal (npm)

Details

The OpenSSF Package Analysis project identified 'unifi-portal' @ 99.0.0 (npm) as malicious. It is considered malicious because: - The package communicates with a domain associated with malicious activity.

Decision reason

OpenSSF Malicious Packages via OSV confirms unifi-portal@99.0.0 as malicious (MAL-2026-5289): Malicious code in unifi-portal (npm)

References

OSV advisory

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

Source & flagged code

0 flagged · loading source

No flagged code excerpts are attached to this scan.

Findings

1 High

HighOsv Malicious Advisory

100%Block

Verdict confidence

TypeMalware

Firewall policyMatched malicious

Package metadata

npm

Authorrcl-lore

Maintainersrafcdln

Version99.0.0

Publishedunknown

LicenseMIT

Dependencies0

Keywordssecurityresearchubiquiti

Runtime surface

package.json

EntrypointsNo public entrypoints declared.

RuntimeNo engine / OS / CPU constraints

Artifact4.62 KB · 3 files1 signature(s)

Install lifecyclepreinstall

LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

LPM CLI

Source & flagged code

0 flagged

No flagged code excerpts are attached to this scan.

unifi-portal: Malicious npm security report (Block) | LPM Firewall