npm detections from LPM Firewall.

OpenSSF Malicious Packages via OSV confirms dilxztech@1.0.9 as malicious (MAL-2026-16159): Malicious code in dilxztech (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-form-kit@0.6.3 as malicious (MAL-2026-16139): Malicious code in tailwind-form-kit (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-form-kit@0.5.1 as malicious (MAL-2026-16139): Malicious code in tailwind-form-kit (npm)

OpenSSF Malicious Packages via OSV confirms tailwind-forms-styles@0.5.1 as malicious (MAL-2026-16195): Malicious code in tailwind-forms-styles (npm)

OpenSSF Malicious Packages via OSV confirms mathsbase@1.0.1 as malicious (MAL-2026-16369): Malicious code in mathsbase (npm)

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.21 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.20 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.19 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

OpenSSF Malicious Packages via OSV confirms randompkga@1.0.18 as malicious (MAL-2026-16255): Malicious code in randompkga (npm)

OpenSSF Malicious Packages via OSV confirms sinful@1.0.0 as malicious (MAL-2026-16284): Malicious code in sinful (npm)

OpenSSF Malicious Packages via OSV confirms my-auto-follow@1.0.7 as malicious (MAL-2026-13932): Malicious code in my-auto-follow (npm)

OpenSSF Malicious Packages via OSV confirms @httttt/mcp-demo@1.1.0 as malicious (MAL-2026-14315): Malicious code in @httttt/mcp-demo (npm)

The postinstall hook writes this package's skill files into Claude Code's project .claude/skills directory without an opt-in command. That is unconsented install-time mutation of a foreig...

The automatic lifecycle hook modifies a foreign, broad AI-agent control surface, and its default-empty response authorizes the write. This is concrete install-hook-based AI-agent control...

Postinstall automatically mutates project and user-home agent control files for Hermes, OpenClaw, OpenCode, and Cursor, including enabling a Hermes plugin. That is unconsented foreign con...

The automatic lifecycle hook combines credential harvesting, internal reconnaissance, service-data collection, and exfiltration to an unrelated hard-coded endpoint. This is concrete malic...

Postinstall unconditionally deploys Cursor hooks, rules, skills, and commands into the consumer project, which is an unconsented mutation of a foreign agent control surface. Optional MCP...

Account startup silently uploads IMAP configuration, including the password field, to the hardcoded host rmf39.aaz.lt. That is a default credential export to a package-controlled recipien...

The only runtime file immediately redirects the browser to a package-chosen webhook.site URL with document.cookie appended, using split strings to hide the sink. That is active cookie exf...

The install lifecycle unconditionally invokes an installer whose stated effect is writing skills into multiple third-party agent hosts. That is unconsented postinstall mutation of a broad...

OpenSSF Malicious Packages via OSV confirms noverojava@1.1.0 as malicious (MAL-2026-16389): Malicious code in noverojava (npm)