@pedrofariasx/toolstream@0.3.0

One or more suspicious static signals were detected.

Installing the package through npm-compatible clients.

Unconsented modification of a foreign AI-agent control surface.

postinstall writes project .claude/sources/toolstream.md

On installation, the lifecycle hook uses INIT_CWD or the current directory as the consumer project and recursively creates .claude/sources, then writes toolstream.md there. This modifies an AI-agent-facing project configuration surface without an explicit user command.

The postinstall hook concretely performs unconsented mutation of the consuming project's .claude control surface. Although its content is a benign guide and no exfiltration was found, this meets the install-time AI control-surface block boundary.