@godxjp/ui@18.15.1

High-risk behavior combination matched malicious policy.

npm installation runs postinstall in a consumer project.

A consumer agent gains an unconsented, remotely resolved tool capability controlled outside the installed package.

Automatic MCP configuration injection with an npx-backed server command.

The postinstall hook runs without an explicit setup command and adds a godx-ui server to the consumer's .mcp.json. That server is configured as npx @godxjp/ui-mcp, so an agent can resolve and execute a separate package on demand. Although the code avoids overwriting an existing entry and skips some environments, it still mutates a broad agent control surface during dependency installation.

This is an unconsented postinstall mutation of a consumer AI-agent control surface that registers a remotely resolved executable capability. The absence of direct secret theft does not remove the concrete control-hijack risk.