Loading npm security reports…
Command line interface for Tigris object storage
LPM flags this version as an AI-agent control-surface risk. Installation automatically modifies an existing Claude Code control surface. It installs a non-user-invocable skill that steers future agent behavior toward this package's service.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe manifest runs postinstall automatically.
package.jsonView on unpkg · L68Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/chunk-Z5DYQHN2.jsView on unpkg · L1Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
postinstall.cjsView on unpkg · L1Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L68The manifest runs postinstall automatically.
package.jsonView on unpkg · L68Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L68Package source references dynamic require/import behavior.
dist/chunk-Z5DYQHN2.jsView on unpkg · L1Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
postinstall.cjsView on unpkg · L1