devez-vibe@1.6.62

High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source

npm installation triggers postinstall; running the packaged client triggers the bridge.

The package can persist and update agent instructions in user-level Codex and Claude directories without an explicit setup command.

Automatic cross-agent skill installation and permission-bypass preference.

The package runs install-skills.mjs automatically during npm installation. That script copies its bundled skill into both Codex and Claude user skill directories, then removes target files that are no longer in the package copy. This is an unconsented install-time mutation of broad, foreign AI-agent control surfaces. Separately, the shipped Claude bridge initializes sessions with permission-skipping capability and attempts bypass-permissions mode. No source evidence established secret exfiltration, but the automatic persistence and control-surface mutation meet the install-hook abuse blocking rule.

This release automatically writes and prunes user-level skills for two unrelated AI-agent platforms during postinstall, rather than requiring an explicit setup command. The added runtime permission-bypass behavior increases the impact of that injected control surface.