Loading npm security reports…
Cloud and zero-trust agentic workflow marketplace for skills, agents, rules, MCP references, and compliance-aware architecture.
Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Package source references a known benign dynamic code generation pattern.
tests/fixtures/frontend-security-detection/frontend-dom-xss-csp-review/red/dynamic-function.jsView on unpkg · L4Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
tests/validate-aws-progressive-disclosure.pyView on unpkgPackage ships non-JavaScript build or shell helper files.
tests/validate-aws-progressive-disclosure.pyView on unpkgPackage source references a known benign dynamic code generation pattern.
tests/fixtures/frontend-security-detection/frontend-dom-xss-csp-review/red/dynamic-function.jsView on unpkg · L4Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
tests/validate-aws-progressive-disclosure.pyView on unpkgPackage ships non-JavaScript build or shell helper files.
tests/validate-aws-progressive-disclosure.pyView on unpkg