Loading npm security reports…
RUN.game SDK
LPM flags this version as an AI-agent control-surface risk. On npm install, the package downloads remote content and injects it into broad AI-agent instruction files across the consumer project. This is an unconsented foreign AI-agent control-surface mutation.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references a known benign dynamic code generation pattern.
dist/chunk-2WRAWLP3.jsView on unpkg · L1Package source references dynamic require/import behavior.
dist/sandbox/index.jsView on unpkg · L1415Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L56Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L56Package source references a known benign dynamic code generation pattern.
dist/chunk-2WRAWLP3.jsView on unpkg · L1Package source references dynamic require/import behavior.
dist/sandbox/index.jsView on unpkg · L1415