@cakejp/design-system@0.20.0

One or more suspicious static signals were detected.

npm installation triggers the postinstall lifecycle hook.

The package gains a persistent, package-updatable influence over Codex and Claude Code behavior in an unrelated consumer project.

Postinstall copies AGENTS.md and CLAUDE.md into the consumer root.

On npm install, the postinstall hook invokes bin/init.js. In postinstall mode it identifies the consumer root and copies package templates to AGENTS.md and CLAUDE.md when they do not already exist. These are broad AI-agent control files in the consumer repository and instruct agents to read rules held under node_modules, allowing later package updates to change the instructions without modifying the consumer repository files.

This package uses an unconsented postinstall hook to create broad AI-agent control files outside its own directory. That is a concrete foreign control-surface mutation and meets the blocking policy even though no network exfiltration was found.