@grabcad
LPM Firewall blocks 4 packages in the @grabcad npm scope. 4 have LPM's own review and are listed first.
Source inspection confirms automatic disclosure of identifying installation metadata to a fixed external endpoint without an installer consent gate. This supports blocking the package as...
The postinstall hook activates the beacon automatically, which collects identifying machine and project metadata and sends it to a fixed endpoint. This supports blocking the package for i...
The source confirms automatic install-time disclosure of host and project identifiers to a fixed external collector. This supports a malicious verdict and publish block.
The postinstall hook automatically discloses host and installation identifiers to a publisher-selected external collector without installer consent. This is concrete installation-time dat...