npm scope
@tyroneross
LPM Firewall blocks 2 packages in the @tyroneross npm scope. 2 have LPM's own review and are listed first.
Oct 17, 2026
@tyroneross/bookmark@0.3.2
AI-agent control-surface riskThe automatic postinstall mutation of global Claude Code settings and instructions creates an unconsented agent control surface. This meets the policy for blocking lifecycle-driven AI-age...
Sep 7, 2026
@tyroneross/coding-debugger@1.9.0
AI-agent control-surface riskThis is an unconsented install-time mutation of a foreign AI-agent control surface, with persistent automatic execution of another registry package. The absence of observed secret theft d...
Each card opens the package page with its evidence and every recorded version.