dingtalk-workspace-cli@1.0.57

High-risk behavior combination matched malicious policy.

npm install

Unconsented agent control-surface modification; bundled instructions and scripts become available to multiple AI-agent environments.

postinstall extraction and overwrite of cross-vendor agent skill roots

Installing the npm package invokes install.js. It extracts bundled skills, always removes and replaces ~/.agents/skills/dws, and conditionally removes and replaces dws skill directories in numerous unrelated agent products whenever their parent directories exist. This install-time, cross-vendor mutation exposes bundled agent instructions and Python scripts without a user-requested setup action.

This is a concrete unconsented postinstall mutation of a broad foreign AI-agent control surface, which meets the blocking policy. No network exfiltration was found in the inspected JavaScript installer, but it is not required for this verdict.