npm scope
@social-data
LPM Firewall blocks 3 packages in the @social-data npm scope. 3 have LPM's own review and are listed first.
Oct 1, 2026
@social-data/social-neuron-subscription@1.0.6
AI-agent control-surface riskSource confirms automatic postinstall mutation of OpenClaw's skill directory without consent. This meets the blocking policy for foreign AI-agent control-surface writes, despite otherwise...
Sep 28, 2026
@social-data/social-neuron-opinion-query@1.0.3
AI-agent control-surface riskThe package performs an automatic postinstall overwrite of the user's OpenClaw skills directory. This meets the install-time AI-agent control-surface mutation block policy.
Sep 26, 2026
@social-data/social-neuron-metadata-query@1.0.0
AI-agent control-surface riskUnconsented postinstall mutation of the OpenClaw skills directory is a foreign AI-agent control-surface write. The skill content is product documentation, but that does not remove the aut...
Each card opens the package page with its evidence and every recorded version.