npm scope
@vaibot
LPM Firewall blocks 2 packages in the @vaibot npm scope. 2 have LPM's own review and are listed first.
Oct 12, 2026
@vaibot/circuit-breaker-openclaw-plugin@1.3.2
AI-agent control-surface riskThe automatic postinstall hook makes broad changes to the consumer’s OpenClaw plugin configuration and enables the package. This meets the policy for blocking unconsented install-time mut...
Sep 29, 2026
@vaibot/codex-circuitbreaker-plugin@1.3.2
AI-agent control-surface riskThe automatic lifecycle hook mutates global Codex agent configuration and registers a remote MCP service. This meets the blocking policy for unconsented postinstall control-surface mutation.
Each card opens the package page with its evidence and every recorded version.