@andy-toolforge
LPM Firewall blocks 9 packages in the @andy-toolforge npm scope. 9 have LPM's own review and are listed first.
This is a concrete unconsented postinstall mutation of a foreign AI-agent control surface. The absence of exfiltration does not remove that install-time control-surface risk. Product guar...
The runtime messaging adapters are user-invoked and package-aligned, but the install-time mutation of a foreign project-level agent skill directory is concrete and unconsented.
Source inspection confirms unconsented postinstall mutation of a project-level OpenCode skill directory, which matches the firewall block policy for broad AI-agent control-surface writes....
Source inspection confirms automatic postinstall mutation of .opencode/skills, which matches the block policy for unconsented npm lifecycle mutation of a foreign/broad AI-agent control su...
Although the planted skills are business-analysis aligned and no exfiltration was found, the package automatically writes AI-agent control files into the consumer project during postinsta...
Source inspection confirms unconsented lifecycle mutation of a broad/project AI-agent control surface via .opencode/skills, which matches the block policy even though the planted content...
Although the package functionality is mostly aligned with image/podcast generation, the lifecycle hook unconditionally plants agent skill files into .opencode/skills, a broad AI-agent con...
Static inspection confirms unconsented npm lifecycle mutation of a project AI-agent skill surface, which matches the firewall policy for ai_agent_control_hijack. No additional credential...
The confirmed issue is not classic malware or exfiltration, but the package uses an npm lifecycle hook to plant agent skill files into a project-level .opencode control surface without co...