npm scope
@ploomescrm
LPM Firewall blocks 2 packages in the @ploomescrm npm scope. 2 have LPM's own review and are listed first.
Oct 16, 2026
@ploomescrm/ui@3.9.0
AI-agent control-surface riskSource confirms that postinstall automatically modifies the consumer's project-level Claude configuration and imports package-authored guidance without affirmative consent. This meets the...
Aug 8, 2026
@ploomescrm/bridge@1.1.1
AI-agent control-surface riskThe package performs a concrete, automatic postinstall mutation of the consuming project's broad Claude Code extension and instruction directories. This meets the blocking policy even tho...
Each card opens the package page with its evidence and every recorded version.