@tantuui/tokens@0.0.6

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

npm installation runs the postinstall lifecycle hook.

A dependency silently adds persistent package-authored guidance that participating coding agents may follow.

postinstall creation or replacement of AI assistant instruction files

On npm install, the lifecycle script locates the consuming project and copies a package-controlled AI instruction document into existing Kiro or Cursor control directories, falling back to docs. It also replaces a prior file bearing its marker. This is unconsented install-time mutation of foreign AI-agent configuration, so the package can influence future agent actions in the consumer repository.

Source inspection confirms an install-time write to `.kiro/steering` and `.cursor/rules`; this meets the policy's concrete foreign AI-agent control-surface mutation boundary. No separate exfiltration or remote payload chain was found.