npm scope
@threadplane
LPM Firewall blocks 2 packages in the @threadplane npm scope. 2 have LPM's own review and are listed first.
Oct 24, 2026
@threadplane/ag-ui@0.3.3
MalwareThe postinstall hook automatically sends installation data and configured Git identity to a publisher-selected endpoint without affirmative consent. This is an unconsented installation be...
Oct 24, 2026
@threadplane/render@0.3.3
Data exfiltrationThe postinstall hook automatically discloses identifying installation and Git configuration data to a growth collector. Because the transfer is not gated by affirmative consent, this is m...
Each card opens the package page with its evidence and every recorded version.