npm detections from LPM Firewall.

OpenSSF/OSV malware advisory MAL-2026-6788 blocks this version. The npm package `datefmt-helper` is a supply-chain dropper disguised as a benign date-formatting utility (its `description`...

Static source inspection confirms automatic install-time execution of credential/file harvesting, shell command execution, and outbound exfiltration. This behavior is unrelated to the cla...

Direct source inspection confirms concrete install-time exfiltration behavior with external network transmission and no package-aligned benign purpose. This should be blocked from publica...

Source inspection confirms repeated install-time credential/secret harvesting, external exfiltration, and unauthorized local API mutation with no package-aligned purpose. This is concrete...

Direct source inspection confirms install-time secret harvesting, external exfiltration, and local API mutation attempts in all lifecycle scripts. This is concrete malicious behavior with...

This is concrete malicious behavior: concealed import-time network retrieval, executable drop, and process launch unrelated to the package's declared multer functionality. The absence of...

Source inspection confirms an install-time write into ~/.claude/skills from package-supplied AI-agent instructions, which is concrete unconsented lifecycle control-surface mutation. Other...

Direct source inspection confirms install-time writes to ~/.claude/skills, which is an AI-agent control surface, from a package lifecycle hook. Even without credential theft or exfiltrati...

Static inspection confirms concrete install-time writes of AI-agent instruction files into consumer projects. No exfiltration was found, but this matches the firewall policy for unconsent...

Source inspection confirms user-level persistence, remote command execution, and arbitrary path upload behavior that is not limited to benign package functionality. The absence of npm lif...

Direct source inspection confirms an install-time detached remote-code loader with obfuscation and dynamic Function execution. This is concrete malicious behavior, not package-aligned Nod...

Source inspection confirms automatic runtime writes to Claude Code hook/command configuration plus prompt-control directives, which is an unconsented AI-agent control-surface mutation. Ot...

Direct source inspection confirms a concrete AI-agent control-surface mutation that exfiltrates agent transcripts to a hardcoded remote endpoint without clear user-facing disclosure in RE...

Source inspection confirms active runtime remote code execution via fetch plus eval in assets/js/leaderboard.js, reachable from leaderboard.html. The absence of install hooks lowers npm-i...

Static inspection confirms a live remote-code execution path via fetch plus eval, not just a scanner label. Although there is no install-time behavior, the package delegates runtime code...

Static source inspection shows a purpose-built phishing/spam delivery toolkit with explicit security-gateway evasion, not merely a benign mailer. Although there is no confirmed automatic...

Direct source inspection confirms a user-invoked CLI backdoor that persists an external SSH key and enables remote login under misleading MCP setup messaging. This is concrete unauthorize...

The package performs unconsented lifecycle writes to OpenCode agent/control files with shell/edit-capable agents, matching the firewall's malicious AI-agent control hijack boundary. Other...

OpenSSF/OSV malware advisory MAL-2026-6715 blocks this version. src/index.cjs exports getPlugin(), which returns a function that performs an HTTPS GET to a hardcoded URL 'https://api.avax...

Source inspection confirms a reachable exported function in index.js fetches remote content and evals it, which is not package-aligned for a zero-dependency SVG helper. Although there is...

OpenSSF/OSV malware advisory MAL-2026-6721 blocks this version. The package's index.js defines run()/from_str() that recursively walk process.cwd() and match files named.env, env, id.json...