Loading npm security reports…
Skip to main contentData Exfiltration2026-09-30 07:07Data Exfiltration2026-09-30 07:06Data Exfiltration2026-09-30 07:06
npm threat feed
npm detections from LPM Firewall.
Investigate malicious npm packages and AI-agent policy findings. Each report identifies the package version, supporting evidence, advisory sources, and current Firewall decision. Malware findings and policy violations are labelled separately.
Security reports — page 17
Updated 8 Oct 2026, 19:28 UTC. Ordered by latest scan.
ai-workshop-maa15-radio@100.0.0
The source establishes automatic, unconsented transmission of local identifying information to an unrelated endpoint during installation. This is concrete data exfiltration rather than an...
ai-workshop-radio-app@100.0.0
The automatic lifecycle performs concrete, unconsented data exfiltration unrelated to the package's date-formatting functionality. The collection and actual network send are directly esta...
ai-workshop-radio-lambda@100.0.0
Source proves automatic, unconsented export of identifying local information during installation. The external reporting behavior is unrelated to the package’s arithmetic functionality an...
alexa-cybertron-team-code-review-agent@100.0.0
The source proves automatic, unconsented export of local identifying information to an unrelated external recipient. This concrete install-time data exfiltration warrants blocking.