@tera-system/pro@0.2.0

High-risk behavior combination matched malicious policy.

npm installation runs postinstall; later OpenCode startup runs enabled MCP commands.

A package installation can change AI-agent behavior in the project and cause later execution of npx-fetched MCP tools; license data is sent to the vendor endpoint when configured.

Postinstall agent configuration injection and signed remote bundle deployment.

Installing the package automatically creates an OpenCode configuration if one is absent. The configuration enables MCP servers whose commands use npx, so a later OpenCode session can download and run third-party tools. The same postinstall fetches and applies signed vendor bundle files into agent and command directories. Existing differing configuration is preserved, but no user command or opt-in is required before the initial AI-agent control-surface mutation.

This is concrete unconsented postinstall mutation of a project AI-agent control surface, including enabled remote package execution paths. Collision protection and bundle signature checks reduce some risk but do not remove the automatic control-surface change.