@buntok/core@1.0.9

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

npm installation

Unconsented modification of a foreign project and its agent control surface.

postinstall project and AI-agent configuration mutation

The package declares a postinstall hook, so installing it executes code in the caller's project context. That code derives the project root from INIT_CWD or cwd, overwrites its README.md, creates .agents/skills/buntok, and writes a package-supplied SKILL.md there. It then tells the user to restart the agent so the injected skill loads. No exfiltration was found, but the unconsented install-time foreign AI-agent control-surface mutation meets the block policy.

Source inspection confirms an automatic postinstall writes both a project-root file and a package-controlled AI-agent skill outside the package. This is concrete, unconsented install-time mutation of a foreign control surface.