@eldestar/curator@1.1.0

One or more suspicious static signals were detected.

npm install or npx @eldestar/curator

Future Claude Code sessions can execute package-supplied hooks that read project docs/git state and inject instructions/context into the agent session.

unconsented lifecycle mutation of Claude Code hooks

On install, the package copies its Claude command and hook assets into the user's home Claude directory, then edits ~/.claude/settings.json so Claude Code SessionStart runs the copied hook. That hook reads project-controlled .protocol.md plus local project docs and git state and emits context into the agent session. This is product-aligned behavior, but it is delivered through an npm lifecycle hook into a broad foreign AI-agent control surface without explicit consent at the point of mutation.

The package's core behavior is an install-time rewrite of Claude Code's global hooks/settings, which matches the blockable AI-agent control-hijack policy even though no classic malware or network exfiltration was found. The absence of network and secret harvesting reduces traditional malware indicators but does not neutralize the unconsented lifecycle control-surface mutation.