domma-js@0.36.0

High-risk behavior combination matched malicious policy.

npm postinstall

Unconsented mutation of a foreign AI-agent control surface; copied instructions may affect subsequent agent behavior.

default-approved copy of AI-agent instruction/config files into a parent project root

During npm postinstall, the package checks a node_modules context, derives a parent project location, prompts with “(Y/n)”, and treats an empty response as approval. It then creates CLAUDE.md and .claude/ there when absent. This is an install-time mutation of an AI-agent control surface outside the package, rather than an explicitly invoked setup action.

The lifecycle hook performs default-approved writes to a foreign project’s Claude Code files. The absence of exfiltration does not remove the policy-defined install-time agent-control hijack risk.