@godxjp/ui@23.4.7

High-risk behavior combination matched malicious policy.

npm install or any install that runs the package postinstall lifecycle hook.

A dependency can alter an agent's available tools and persistent instructions without a user setup action.

Automatic mutation of consumer AI-agent configuration and workflow files.

The postinstall hook runs automatically in a consumer project. It writes an MCP configuration whose command is npx @godxjp/ui-mcp at a selected version, then creates or refreshes agent workflow instructions, CLAUDE.md content, and AI rule files. This is a persistent mutation of broad consumer AI-agent control surfaces without an explicit setup command. Although the code has an opt-out and does not directly exfiltrate data, automatic installation is sufficient to change future agent behavior and tool execution.

This package uses postinstall to make unconsented, persistent changes to consumer AI-agent configuration and instructions, including an npx-backed MCP command. That is concrete install-hook abuse under the stated policy.