artefact-design-system@0.15.0

High-risk behavior combination matched malicious policy.; source fingerprint signature matched known malicious package; routed for review

npm postinstall when installed as a dependency under node_modules

Unconsented modification of a broad project AI-agent control surface.

writes/appends a marker block to the consumer's CLAUDE.md or AGENTS.md

On dependency installation, postinstall.mjs identifies the consumer project via INIT_CWD or cwd and selects an existing CLAUDE.md or AGENTS.md, creating one if neither exists. It appends a persistent block telling an AI agent to read and follow the package's AGENTS.md. This changes a consumer-owned, broad agent instruction surface without an explicit user command.

The source confirms an unconsented install-time write to consumer project agent-control files. This meets the policy's publish-block condition despite the absence of exfiltration or runtime payload behavior.