codeplay-common@4.2.5

High-risk behavior combination matched malicious policy.

npm install with codeplayCommon.agentsVersion set to 1.0; later project build execution

A package can establish instructions consumed by AI coding agents across the project and retain them after its cleanup path.

install-time project-root agent instruction injection with persistent remote-update helper

The package’s postinstall script reads a package-selected agent-template version and copies AGENTS.md plus AGENTS/ into the consuming project root without an interactive consent step. These are broad agent instruction files rather than package-owned configuration, and its preinstall cleanup intentionally excludes them, leaving the control surface in place. The bundled build helper separately obtains replacement code from the vendor endpoint without integrity verification. The shipped default agent version is missing, but the documented 1.0 selection activates the injection path.

This is an unconsented install-time mutation of a broad AI-agent control surface, which meets the firewall block boundary. The absent default template limits default activation but does not remove the concrete version-1.0 lifecycle path.