npm scope
@series-inc
LPM Firewall blocks 2 packages in the @series-inc npm scope. 2 have LPM's own review and are listed first.
Oct 17, 2026
@series-inc/stowkit-three-loader@0.1.53
AI-agent control-surface riskThe postinstall hook performs unconsented project-level AI configuration changes, including a Cursor rule marked to always apply. This meets the policy for lifecycle mutation of a broad A...
Jul 29, 2026
@series-inc/rundot-game-sdk@5.22.0
AI-agent control-surface riskSource inspection confirms a concrete, unconsented postinstall mutation of broad AI-agent control files, sourced from a remote mutable archive. This meets the blocking policy.
Each card opens the package page with its evidence and every recorded version.