@hzero-front-ui
LPM Firewall blocks 5 packages in the @hzero-front-ui npm scope. 5 have LPM's own review and are listed first.
Source inspection confirms unconsented install-time collection and transmission of local environment metadata to a callback domain. This is concrete data exfiltration behavior.
Direct manifest inspection confirms two install-time scripts that fingerprint and exfiltrate the installer environment to an unrelated external callback domain. The empty runtime entrypoi...
The package performs unconsented install-time environment fingerprinting and external transmission, with no functional code that would justify it. This is concrete data exfiltration behav...
Direct source inspection confirms two automatic install hooks that exfiltrate host and environment metadata to an unrelated callback domain. The package provides no corresponding runtime...
Direct manifest inspection confirms duplicated install-time collection and outbound callback requests. The empty entrypoint and generic README provide no package-aligned purpose for the b...