Loading npm security reports…
Safari browser automation for AI agents — native macOS, zero Chrome overhead. 96 tools via AppleScript + JavaScript.
LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious payload or external exfiltration is established. The package installs a privileged browser-automation helper and exposes a localhost bridge for its extension.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L18Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L18