copilot-notify@0.1.0

One or more suspicious static signals were detected.

Installing the package runs postinstall automatically.

A package install changes a foreign AI-agent control surface and shell startup behavior without an explicit setup command.

Automatic persistence in Copilot hooks, Copilot settings, and the PowerShell profile.

Installing the package invokes install/install.js. It selects COPILOT_HOME or the user's .copilot directory, creates its hooks directory, copies a PowerShell payload, replaces notification-hooks.json with command hooks, alters settings.json, and adds a dot-sourced wrapper to the PowerShell profile. The resulting hooks execute the installed PowerShell script for Copilot events. Although the observed payload is a local notification implementation and no data theft or network activity was found, the automatic modification of shared Copilot and shell control surfaces is unconsented persistence.

The postinstall hook automatically installs command hooks into the user's Copilot configuration and persists shell-profile code. This is a concrete unconsented mutation of foreign AI-agent and shell control surfaces.