npm scope
@telora
LPM Firewall blocks 3 packages in the @telora npm scope. 3 have LPM's own review and are listed first.
Oct 22, 2026
@telora/daemon@0.24.36
AI-agent control-surface riskThe dependency’s automatic postinstall modifies global Claude hook settings without affirmative consent, meeting the control-surface hijack criteria. The inspected source does not prove s...
Oct 22, 2026
@telora/mcp-products@0.23.16
AI-agent control-surface riskThe install hook automatically adds commands to a global AI-agent control surface without user consent. This is a concrete install-time control-surface mutation, so publishing should be b...
Oct 10, 2026
@telora/telora-ai@0.4.0
AI-agent control-surface riskThe verified postinstall behavior makes an unconsented change to Claude Code’s command-hook configuration, which qualifies as AI-agent control-surface hijacking under the review policy. T...
Each card opens the package page with its evidence and every recorded version.