Loading npm security reports…
Skip to main contentData Exfiltration2026-07-01 12:35Credential Exfiltration2026-07-01 12:20Data Exfiltration2026-07-01 09:48Data Exfiltration
npm threat feed
npm credential and data exfiltration reports.
Investigate credential theft and data exfiltration, including attempts to send secrets or other sensitive data to an outside recipient. These reports include LPM Firewall detections. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision.
Security reports — page 68
Updated 10 Oct 2026, 11:26 UTC. Ordered by latest scan.
date-fns-lite@1.0.8
Direct source inspection confirms unconsented install-time reconnaissance and exfiltration to a hard-coded external endpoint. The benign main library does not justify the lifecycle hook b...
date-fns-lite@1.0.3
Source inspection confirms concrete install-time credential and environment exfiltration unrelated to the package's date utility purpose. The package should be blocked.
date-fns-lite@1.0.0
The lifecycle hook performs concrete unconsented data exfiltration to an external callback domain, using multiple fallback network tools. The benign date formatting entrypoint does not ju...
pp-react-v5@30.0.2
Direct source inspection confirms unconsented install-time collection and external exfiltration of local environment data. This is concrete malicious behavior rather than package-aligned...