npm scope
@inboost-pro
LPM Firewall blocks 2 packages in the @inboost-pro npm scope. 2 have LPM's own review and are listed first.
Oct 19, 2026
@inboost-pro/inboost-proxy@0.3.3
AI-agent control-surface riskThe manifest activates a postinstall routine that automatically writes package-provided instructions into global and project AI-agent configuration. This is unconsented lifecycle mutation...
Oct 7, 2026
@inboost-pro/inboost-ai-proxy@0.3.1
AI-agent control-surface riskThe manifest's postinstall hook reaches code that automatically writes to multiple AI-agent configuration locations without a consent prompt. This meets the block criterion for unconsente...
Each card opens the package page with its evidence and every recorded version.