Loading npm security reports…
Client feedback collection tool for Impakers OS
LPM treats this as warn-only first-party agent extension lifecycle risk. On direct installation, the postinstall hook mutates the consuming project’s Claude skill directory and may modify its ESLint config. This is a persistent first-party agent-extension setup, not a confirmed exfiltration or payload chain.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/webpack.jsView on unpkg · L1Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/setup.mjsView on unpkg · L7Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L119Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
Package source references dynamic require/import behavior.
dist/webpack.jsView on unpkg · L1