domma-js@0.29.2

High-risk behavior combination matched malicious policy.

npm install of domma-js in node_modules

Can influence future Claude Code behavior in the consuming project via package-supplied CLAUDE.md and .claude/settings.json

postinstall copies AI-agent instruction/config files

On installation, package.json invokes bin/postinstall.js. When running from node_modules outside CI, it finds the consuming project root and prompts to copy AI assistance files; any answer other than n/no proceeds. The copied files include CLAUDE.md and .claude/settings.json, which are Claude Code control/context files supplied by the package.

This is concrete install-time AI-agent control-surface mutation, not merely documentation in the package tarball. The prompt reduces stealth but default-yes lifecycle writes into the consumer project root remain unconsented enough for firewall blocking under the stated policy. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.