@clickzetta/cz-cli@1.17.24

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

npm postinstall

A package install can add or replace capabilities in Claude, Kiro, Cursor, Codex, OpenClaw, and SingClaw environments.

postinstall cross-agent skill deployment and replacement

On npm postinstall, the package obtains a platform binary (including an npm registry fallback), then copies its cz-cli skill into six foreign AI-agent skill directories. It removes legacy aliases and replaces existing cz-cli skill directories first. This is unconsented install-time mutation of broad agent control surfaces; the injected skill content is outside the reviewed launcher package.

The source directly implements cross-vendor AI-agent configuration mutation during postinstall, which meets the blocking policy regardless of the absence of visible exfiltration in the launcher files.