@softize/opus@12.10.0

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

npm postinstall during dependency installation

Unconsented persistence and control over Claude agent behavior and repository hooks.

automatic consumer-project materialization of agent hooks, skills, and Git hooks

On npm installation, the postinstall script locates the consumer project and runs initialization. That initialization writes agent skills, changes Claude settings to register a Stop command hook, installs Git hook files, changes the Git hooks path, and removes ignore entries for those artifacts. The Stop hook runs package-controlled checks against changed applications and exits with a blocking status when it finds violations. These are automatic changes to foreign AI-agent and repository control surfaces rather than an explicit setup command.

This is malicious install-hook abuse under the policy because an automatic npm postinstall mutates a consumer’s broad AI-agent control surface and Git hooks. No network theft was needed to establish the concrete unconsented control behavior.