Loading npm security reports…
커머스 운영 자동화 CLI — Cafe24, Coupang, SmartStore, Shopify 통합 관리
LPM flags this version as an AI-agent control-surface risk. Installing the package runs a hidden setup command that registers bundled skills in Claude Code's user-level skills directory. This mutates a foreign AI-agent control surface without an explicit user command.
Install-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkgA single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/cli.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.jsView on unpkgInstall-time lifecycle script matches a deterministic static-gate block pattern.
package.jsonView on unpkg · L16Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L16A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/cli.jsView on unpkg · L1Source contains an obfuscated payload loader that reconstructs and executes hidden code.
dist/cli.jsView on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/cli.jsView on unpkg