@vanillagreen
LPM Firewall blocks 5 packages in the @vanillagreen npm scope. 5 have LPM's own review and are listed first.
Source establishes unconsented postinstall mutation of a shared Pi agent instruction file, including a user-directory fallback. This meets the blocking rule for foreign or broad AI-agent...
The user-wide fallback makes this an automatic mutation of a broad AI-agent control surface, rather than setup confined to package-owned extension state. This meets the supplied blocking...
Source shows an unconsented postinstall write to a foreign, shared AI-agent control surface, including a user-wide fallback. This meets the blocking policy despite the package-aligned ins...
The source establishes unconsented postinstall mutation of a foreign, shared AI-agent control surface, which meets the blocking policy. Package-aligned instruction content and uninstall c...
Source establishes unconsented postinstall mutation of a broad AI-agent instruction surface. This meets the supplied blocking policy even without evidence of credential theft or remote pa...