Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading threat types…

Stop threats before they install.

Firewall

Threat feed
Threat types
How it works
Report methodology
Research
Policy

LPM

LPM.dev Registry
LPM CLI
LPM Vault

© 2026 LPM

Typosquat in npm packages | LPM Firewall

npm threat types

Typosquat in npm packages.

These packages use names that imitate popular packages to catch mistyped installs.

Packages

No packages with LPM's own review are listed for this type yet.

No packages are listed yet.

Each card opens the package page with its evidence and every recorded version.

Malware →Install hook abuse →Staged payload carrier →Protestware →Crypto miner →Every report in the threat feed, including advisories →All threat types →