ksk-design-system@1.54.0

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Installing ksk-design-system@1.54.0.

Unconsented mutation of a broad foreign AI-agent control surface can steer later agent behavior.

postinstall copies package-controlled AGENTS.md and CLAUDE.md into INIT_CWD.

During npm install, the postinstall handler identifies the consumer project via INIT_CWD and, if the files do not already exist, writes package-supplied AGENTS.md and CLAUDE.md into that project. These are recognized instruction surfaces for Codex and Claude and tell agents to load further package-controlled rules. The mutation occurs without an explicit CLI setup command.

This is a concrete, unconsented postinstall mutation of foreign AI-agent control files. Lack of exfiltration does not remove the control-surface compromise.