npm scope
@lovrabet
LPM Firewall blocks 2 packages in the @lovrabet npm scope. 2 have LPM's own review and are listed first.
Sep 29, 2026
@lovrabet/rabetbase-cli@2.5.4
Install hook abuseThe automatic lifecycle chain mutates a broad AI-agent control surface and downloads current external installer code through npx. This meets the install-hook abuse blocking boundary.
Sep 14, 2026
@lovrabet/lovrabet-cli@2.3.3
AI-agent control-surface riskThis is an unconsented postinstall mutation of broad AI-agent control surfaces, with remote npx execution and deliberate obfuscation. It meets the install-hook abuse block boundary.
Each card opens the package page with its evidence and every recorded version.