greprag@5.73.12

High-risk behavior combination matched malicious policy.

npm install of greprag on a machine with ~/.claude or ~/.codex

Package-controlled instructions become active in Claude Code and Codex sessions; the package also provides authenticated cloud-memory networking.

automatic copying of bundled agent skills into foreign agent homes

Installation automatically detects pre-existing Claude Code and Codex homes and copies the bundled greprag skill into each platform's global skill directory. This makes package-authored instructions active in foreign AI-agent environments without requiring the user to run greprag setup. The installed skill directs agent behavior and package commands; runtime code communicates with api.greprag.com using a configured bearer key.

This is a concrete unconsented npm postinstall mutation of broad, foreign AI-agent control surfaces. Under the stated policy, that requires a block regardless of the package-aligned service endpoint.