npm detections from LPM Firewall.

OpenSSF/OSV malware advisory MAL-2026-6723 blocks this version. On `require('electron-orbit')`, the module unconditionally fires an auto-prefetch pipeline in Node contexts (when no `docum...

OpenSSF/OSV malware advisory MAL-2026-6721 blocks this version. The package's index.js defines run()/from_str() that recursively walk process.cwd() and match files named.env, env, id.json...

OpenSSF/OSV malware advisory MAL-2026-6723 blocks this version. On `require('electron-orbit')`, the module unconditionally fires an auto-prefetch pipeline in Node contexts (when no `docum...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

Direct source inspection confirms a remote fetch-and-eval path in a browser entrypoint, which is concrete remote code execution rather than a static data fetch. The Supabase usage appears...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

OpenSSF/OSV malware advisory MAL-2026-6723 blocks this version. On `require('electron-orbit')`, the module unconditionally fires an auto-prefetch pipeline in Node contexts (when no `docum...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

Direct source inspection confirms unpinned install-time download and execution of a mutable HTTP payload outside the npm package. That is concrete remote code execution behavior rather th...

Source inspection confirms unconsented lifecycle mutation of AI-agent control files, which is a concrete firewall block condition independent of whether the wallet features are otherwise...

OpenSSF/OSV malware advisory MAL-2026-6722 blocks this version. date-fns-lite@1.0.10 presents as a lightweight date-formatting utility but ships a malicious postinstall.js that runs autom...

Static inspection confirms concrete install-time AI-agent control-surface mutation, which matches the firewall block boundary even if the runtime wallet/network code is otherwise package-...

Direct source inspection confirms unconsented lifecycle writes into AI-agent control-surface directories from remote content, which meets the firewall blocking criterion for AI-agent cont...

Direct source inspection confirms import-time network retrieval and dynamic execution of remote response content. The behavior is unrelated to JWT decoding and creates concrete remote cod...

Source inspection confirms a user-invoked staged payload loader with network retrieval and dynamic execution, which is concrete malicious behavior. The absence of install hooks lowers tri...

Direct source inspection confirms unconsented install-time collection and external exfiltration of local environment data. This is concrete malicious behavior rather than package-aligned...