Loading npm security reports…
火山方舟 ARK 平台命令行工具
LPM flags this version as an AI-agent control-surface risk. Installing the package automatically downloads and executes a native program. It then runs a non-interactive command intended to refresh connections to local AI agents.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe manifest runs a postinstall script automatically.
package.jsonView on unpkg · L8Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPostinstall downloads and executes a platform binary, then invokes its non-interactive +connect refresh command.
scripts/postinstall.jsView on unpkg · L326The downloaded program is an opaque native binary selected from remote URLs; it can install or alter local agent extensions outside the package directory.
manifest.jsonView on unpkg · L4Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L14Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L14The manifest runs a postinstall script automatically.
package.jsonView on unpkg · L8Postinstall downloads and executes a platform binary, then invokes its non-interactive +connect refresh command.
scripts/postinstall.jsView on unpkg · L326The downloaded program is an opaque native binary selected from remote URLs; it can install or alter local agent extensions outside the package directory.
manifest.jsonView on unpkg · L4