hiskra-code@2.0.0

High-risk behavior combination matched malicious policy.

npm install lifecycle postinstall

Unconsented AI-agent behavior and permission changes in the consuming project, including bash-allowed agents.

install-time .opencode agent/skill/config drop and opencode.json creation

On installation, postinstall.js locates the consuming project, creates .opencode directories, copies package-supplied agents/skills/config, and creates opencode.json that selects the package's orchestrator instructions. The installed primary agent has edit and bash permissions and coordinates other package agents, several also bash-enabled. This is an unconsented lifecycle mutation of an AI-agent control surface rather than passive library content.

Static source inspection confirms install-time writes to Opencode control files that change AI-agent behavior and permissions without an explicit init command. There is no exfiltration or payload execution, but this concrete lifecycle control-surface mutation warrants blocking under the firewall policy. Product guard normalized a non-low false-positive publish_block request to warn-only suspicious.