cbs-cainiao-merchant-cli@0.0.2

High-risk behavior combination matched malicious policy.

npm install / postinstall

Persistent AI-agent behavior modification across installed tools.

unconsented cross-agent skill installation

On npm postinstall, the package enumerates existing AI coding-tool roots and copies its bundled skill and references into each matching tool's skills directory, creating a version marker. This occurs automatically, spans unrelated vendor control surfaces, and changes agent instructions without an explicit user setup command.

The install hook concretely performs unconsented, broad foreign AI-agent control-surface writes. The absence of lifecycle network exfiltration does not remove this policy-defined blocking behavior.