@deppon/pm-toolkit@2.5.53

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

npm postinstall when installed as a project dependency

Unconsented activation of package-supplied agent instructions and tools in the consumer project.

automatic cross-platform AI-agent configuration and MCP registration

On dependency installation, postinstall calls update with both AI platforms and agent setup enabled. The installer replaces project .joycode/.cursor skill and rule directories, registers an active JoyCode agent, and inserts MCP commands into both platforms' configuration without an explicit setup command. It also may query npm and execute npm i in the consumer project.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, not merely an explicit scaffold command. No separate credential theft or external data-exfiltration path was found.