cbs-4px-merchant-cli@0.0.2

High-risk behavior combination matched malicious policy.

npm install

Persistent instruction injection across installed AI coding tools.

postinstall copies a skill into foreign AI-agent directories

On npm install, the postinstall script enumerates ten AI coding-tool configuration roots and, whenever one exists, creates a package-controlled skill directory and copies instructions into it. This occurs without an explicit user setup command and affects unrelated agent products, creating persistent cross-tool control-surface modification.

The package has a concrete install-time, unconsented mutation of broad foreign AI-agent control surfaces. Although no credential exfiltration or remote payload was found, this behavior meets the blocking policy directly.