opencode-sdlc-system@1.0.1

High-risk behavior combination matched malicious policy.

npm installation runs postinstall automatically.

Future OpenCode sessions load package-supplied prompts/plugins with project file access and configured agent capabilities.

Copies and registers global AI-agent extensions.

On automatic npm postinstall, install.js copies package-supplied agent prompts and TypeScript plugins into the user's global OpenCode configuration, then creates or edits opencode.json(c) to activate them. The activated extensions inject project files into system context, track tool activity, and provide agents configured for editing, shell use, and web access. This is an unconsented install-time mutation of a broad AI-agent control surface.

The package contains no observed exfiltration or remote code-loading chain, but its automatic postinstall installs and activates persistent global OpenCode control files. This meets the blocking policy for unconsented install-time mutation of a foreign/broad AI-agent control surface.