Protestware in npm packages.
These packages change their behavior to make a political or social statement, for example by printing messages, sabotaging output or damaging files on selected systems.
Packages
20 packages with LPM's own review, newest scan first. Showing 1–20.
The published entrypoint imports the bundled code containing a delayed, targeted browser disruption. This is concrete protestware behavior and warrants blocking.
Both published entrypoints contain the same targeted browser disruption, and the manifest exposes them for import and require. This is concrete protestware behavior, so the package should...
The entrypoint bundles implement targeted, delayed browser disruption unrelated to the component library's normal purpose. The behavior is directly present in both published entrypoints,...