@inizioevoke/astro-core@3.2.2

High-risk behavior combination matched malicious policy.

npm installation runs the postinstall lifecycle hook.

A package install can alter how the user's Claude agent is instructed for unrelated future Astro requests.

Automatic deletion and copying of a Claude skill into the consumer project.

During npm installation, package.json launches postinstall.mjs. That script resolves the consuming project root, force-removes .claude/skills/evoke-astro-core, and copies in the package's skill. The copied skill directs Claude to activate for many generic Astro component requests even when the package was not named. This is an unconsented install-time mutation of a foreign AI-agent control surface.

This package has a concrete, automatic postinstall chain that overwrites a consumer Claude skill with broad activation instructions. Under the install-control-surface policy, that is malicious install-hook abuse despite no observed network or credential theft.