ksk-design-system@1.47.0

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

npm installation of the package

Unconsented mutation of a broad project AI-agent control surface.

postinstall copy of package-controlled AI instruction templates

On install, the postinstall handler resolves the consumer root from INIT_CWD, verifies a package.json exists, then copies package templates to root-level AGENTS.md and CLAUDE.md if they do not already exist. Those files instruct AI coding agents to load and follow package-supplied rules, creating a persistent control channel affecting later agent sessions without an explicit setup command.

This is concrete, unconsented postinstall mutation of foreign project-level AI-agent control files. The lack of exfiltration does not mitigate that policy-defined control-surface hijack.