@lingjingai/scriptctl@0.39.0

High-risk behavior combination matched malicious policy.

npm postinstall

Unconsented changes to Claude, Codex, and agents instruction/control surfaces.

recursive delete-and-copy of packaged AI-agent skills

On npm installation, the package executes its installer automatically. Unless an environment opt-out is already set, it removes and replaces `scriptctl` skill directories beneath the Claude, agents, and Codex home configuration trees, then stamps a version marker. This is a concrete unconsented postinstall mutation of broad foreign AI-agent control surfaces.

The package’s postinstall hook silently writes packaged agent instructions into multiple third-party agent configuration locations. Under the firewall policy, this lifecycle-driven broad AI-agent control-surface mutation requires blocking even though no exfiltration or remote payload behavior was found.